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PREFACE 


The content of this document was provided by the Control/Propulsion Department, 
Space Flight Training Division, Mission Operations Directorate (MOD), Lyndon B. 
Johnson Space Center (JSC), National Aeronautics and Space Administration (NASA). 
Technical documentation support was provided by Integrated Documentation Services 
(IDS), Hernandez Engineering, Inc. Any questions concerning this workbook or any 
recommendations should be directed to the book manager. 


This material is for training purposes only and should not be used as a source of 
operational data. All numerical data, displays, and checklist references are intended as 
examples. To determine any prerequisites before using this document, consult the 
applicable Certification Plan. For shuttle manuals, consult the appropriate flight 
controller's certification guide (Blue Book) or the Crew Training Catalog. For space 
station manuals, consult the appropriate Space Station Certification Guide or Training 
Administration Management System (TAMS). The applicable training package should 
be studied before attending any classroom session or lesson for which this is a 
prerequisite. 


If this workbook is being read as part of a formal syllabus, the reader should complete 
the training materials evaluation form at the end of the document. The evaluation form 
does not need to be signed. 
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1.0 INTRODUCTION 


The orbital maneuvering system (OMS) provides propulsion for the space shuttle 
vehicle during the orbit phase of flight. It is used for orbital insertion maneuvers after 
the main propulsion system has shut down. It is also the primary propulsion system for 
orbital transfer maneuvers and the deorbit maneuver. 


The OMS is located in two independent pods in the aft end of the orbiter on either side 
of the vertical tail (see Figure 1-1). Each OMS pod contains one OMS engine, a fuel 
tank, an oxidizer tank, and a helium tank, along with propellant feed lines and other 
supporting equipment (see Figure 1-2). The two OMS pods are identical. Normally 
OMS maneuvers are done using both OMS engines together; however, a burn can be 
done using only one of the OMS engines. There are crossfeed lines connecting the left 
and right OMS pods. OMS propellant from one pod can be fed to the engine in the 
other pod through the crossfeed lines. 


RIGHT OMS POD 


LEFT OMS POD 


006500004. 150% 1 


Figure 1-1. Space shuttle orbiter 


The OMS engines use monomethyl hydrazine as the fuel and nitrogen tetroxide as the 
oxidizer. The propellants are hypergolic, which means that they ignite when they come 
in contact with each other, therefore no ignition device is needed. This adds reliability to 
the system, but the propellants are very corrosive and must be handled with care by 
ground crews. Both propellants remain liquid at the temperatures normally 
experienced. However, there are electrical heaters located throughout the OMS pods to 
prevent any freezing of propellants during long periods in orbit when the system is not in 
use. 
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OMS ENGINE 


OMS FUEL TANK 


OMS HELIUM TANK 


OMS OXIDIZER TANK 006500002. 150% 2 


Figure 1-2. OMS pod 


Each OMS engine has a gaseous nitrogen tank that provides pressurized nitrogen to 
operate the engine valves and purge the fuel line after burn completion. The OMS 
engine does not have propellant pumps; propellant flow to the engines is maintained by 
pressurizing the propellant tanks with helium. Propellant quantity is measured by 
electrical probes located inside each tank. 


An automatic computer sequence controls all OMS burns. To start an OMS burn, the 
crew must load a burn target that includes a specific time of ignition (TIG). The burn 
starts automatically at TIG if all the controls are configured properly and stops 
automatically when the burn target is satisfied. The OMS engines can also be shut 
down manually at any time. 


The OMS engines are located on gimbal mounts that allow the engine to pivot left and 
right and up and down under the control of electomechanical actuators. This gimbal 
system provides steering during OMS burns by controlling the direction of the engine 
thrust vector in response to commands from the digital autopilot (DAP) or from the 
manual controls. 


Each OMS engine produces 6000 Ibs of thrust with an ISP (Specific Impulse) of 313 
seconds. For a typical orbiter weight, both engines together create an acceleration of 
approximately 2 ft/sec*. Using all the propellant loaded, the OMS can provide a total 
velocity change (AV) of approximately 1000 ft/sec. A typical OMS-2 burn is around 100 
ft/sec while a deorbit burn requires a AV of about 300 ft/sec. The AV required for orbital 
adjustments is approximately 2 ft/sec for each nautical mile of altitude change. 


At one time there were plans to provide additional AV capability by including an OMS kit 
(see Figure 1-3). An OMS kit would consist of additional sets of propellant and helium 
tanks located in the payload bay and connected through the OMS crossfeed lines. It is 


1-2 


USAO006500 
Rev. A 


unlikely that OMS kits will ever be used, but there are OMS kit switches and gauges 
located in the orbiter. These switches and gauges are currently inoperative. 


006500005. 150 1 
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Figure 1-4. RCS modules 


The reaction control system (RCS) is closely related to the OMS in some ways and 
should be mentioned briefly here. There are three RCS modules in the orbiter: forward, 
left, and right (see Figure 1-4). Each module includes a fuel tank, an oxidizer tank, two 
helium tanks, and a number of RCS jets. (The OMS oxidizer and fuel tanks share a 
single helium tank, but each of the RCS oxidizer and fuel tanks has its own helium 
tank.) The left RCS module is located in the left OMS pod, the right RCS module is in 
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the right OMS pod (see Figure 1-5), and the forward RCS module is in the nose of the 
orbiter. There are crossfeed lines connecting the left and right RCS modules, but the 
forward RCS module is independent. The RCS jets are small rocket engines that are 
used to control the rotational attitude of the vehicle in orbit and during entry. They also 
provide thrust for small translational maneuvers. 


The OMS and RCS use the same type of propellants. OMS propellant can be fed to the 
aft RCS jets by connecting the OMS and RCS crossfeed lines. This is called an OMS- 
to-RCS interconnect. OMS propellant is burned by the RCS jets when it is necessary to 
conserve RCS propellant and also in some translational maneuvers. RCS propellant is 
never fed to the OMS engines because the RCS tanks are too small to supply an 
adequate flow of propellant to an OMS engine. 


The space shuttle flight computer software is contained in the five general purpose 
computers (GPCs). Up to four of the computers contain redundant sets of primary 
software (PASS), and the fifth GPC contains the software for the backup flight system 
(BFS). The primary computers are in control of the vehicle unless the BFS is manually 
engaged. All the GPCs, including the backup, can provide information to the crew by 
means of MEDS CRT MDUSs. 


The flight software is divided into operational sequences (OPS) that are subdivided into 
major modes (MMs), which correspond to mission phases. It will be helpful to be 
familiar with the OPS and major mode numbers (see Figures 1-6 and 1-7). 


OMS burns can be done only in MM 104, 105, 202, and 302. 


OMS ENGINE 


RCS HELIUM TANKS 


OMS FUEL TANK 


RCS FUEL TANK 


OMS HELIUM TANK 


RCS OXIDIZER TANK 


OMS OXIDIZER TANK 006500001. 150% 1 


Figure 1-5. OMS pod with RCS tanks and jets 
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OPS 1: Ascent 


OPS 2: Orbit 


OPS 8: Orbit 


OPS 3: Entry 


OPS 6: Return 
to launch site 
(RTLS) abort 


MM 101 
MM 102 
MM 103 
MM 104 
MM 105 
MM 106 
MM 201 
MM 202 


MM 801 


MM 301 
MM 302 
MM 303 
MM 304 
MM 305 


MM 601 


MM 602 
MM 603 
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Terminal Count 
First Stage 
Second Stage 
OMS 1 Insertion 
OMS 2 Insertion 
Insertion Coast 
Orbit Coast 
Maneuver Execute 


Flight control system (FCS)/Dedicated Display 
Checkout Mode 


Predeorbit Coast 
Deorbit Execution 
Pre-Entry Monitor 
Entry 


Terminal Area Energy Management 
(TAEM)/Landing 


RTLS Second Stage 


Glide RTLS 1 
Glide RTLS 2 


Figure 1-6. Flight software 


The OMS has important interfaces with the data processing system (DPS) and the 
electrical power system (EPS). The OMS valves and gimbal actuators receive 
commands and the system returns some data to the GPCs through 
multiplexer/demultiplexer (MDM) units. They include the four flight-critical aft (FA) 
MDMs and the four flight-critical forward (FF) MDMs. Electrical power is supplied to the 
OMS through main buses, control buses, and alternating current (ac) buses for the 
operation of switches, valves, instrumentation, gimbal actuators, and heaters. 
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OPS 1 ASCENT OPS 2 ORBIT OPS 3 ENTRY 
(OPS 8 FCS CHECKOUT) 


MM 201, 202, 801 


MM 301| |ММ 302 


DEORBIT 


MM 104| OMS 1 


MM 303 


ET SEPARATION 


ENTRY 


MM 103 


MM 305 


eam LANDING 


TYPICAL MISSION PROFILE SHOWING MAJOR MODES 
006500035. ARTs 1 


Figure 1-7. Major modes by flight phase 


The rest of this workbook will cover the OMS in more detail. First there will be a 
description of the various components of the system, followed by a description of how 
the system is operated. The last part of the book provides the background information 
needed to understand and respond to system malfunctions. The guidance and flight 
control aspects of OMS operation are discussed only briefly in this book. A more 
detailed description is provided in the Guidance and Control Insertion/Orbit/Deorbit 
Workbook G&C 1/О/Ю 21002. 
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SYSTEM DESCRIPTION 


In this section, the following five subsystems of the OMS will be discussed: 


2.1 
2.2 
2.3 
2.4 


2.5 


OMS Engine and nitrogen system 
Propellant and helium supply 
Thermal control 


Thrust vector control 


OMS displays 
FUEL OXIDIZER 
OMS ENGINE ! 
FUEL INLET OXIDIZER INLET 
PRESSURE SENSOR PRESSURE SENSOR 
№ PRESSURE 
TO OPEN 


VALVE 1 


BIPROPELLANT 
P VALVE ASSEMBLY 
VALVE 2 ( VALVES OPEN) 


N2 
ыы VALVE 
POSITON 
SENSOR J 
SPRING 
TO CLOSE 


FUEL INJECTOR 
TEMPERATURE 
SENSOR 


INJECTOR PLATE 


COOLING 

JACKET THRUST 
CHAMBER 

NOZZLE 
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Figure 2-1. OMS schematic 
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2.1 ENGINE 


It is in the OMS engine that the fuel is burned with the oxidizer to produce thrust. The 
four parts of the OMS engine that we will discuss are the bipropellant valve assembly, 
the injector plate, the thrust chamber, and the nozzle (see Figure 2-1). 


The bipropellant valve assembly regulates the flow of propellants to the engine and 
thereby starts and stops an engine burn. The valve assembly consists of two fuel 
valves in series and two oxidizer valves in series (see Figure 2-2). Having two valves in 
series for each propellant provides redundant protection against leakage, but it also 
means that both valves must open to allow propellant flow to the engine. Each fuel 
valve is mechanically linked to an oxidizer valve so that they open and close together. 
The name bipropellant valve comes from the fact that each linked set of valves controls 
the flow of both propellants. 


The bipropellant valves are ball valves, which rotate from fully closed (О percent) to fully 
open (100 percent). The valve position in percent for each set can be read by the crew 
on the GNC System Summary 2 display. The position indication should read 
approximately 100 percent for both valve 1 and valve 2 at the start of an OMS burn and 
remain there throughout the burn (see Figure 2-3). If the valve position is less than 70 
percent for either valve, there will probably be insufficient propellant flow and ignition will 
not occur. 


Oxidizer Fuel 


Control Valve #1 - = Ball Valve Assembly #1 
Control Valve #2 — - Ball Valve Assembly #2 


905500007. ART: 1 
usa006500_055r1.tif 


Figure 2-2. Bipropellant valves 


The bipropellant valves are driven open and closed by pneumatic pistons. There is one 
piston for each set of bipropellant valves. The pistons are normally held in the closed 
position by springs. Pressurized nitrogen is used to fill the piston, which then 
mechanically opens the bipropellant valves. The engine control valves regulate the flow 
of nitrogen to the pistons and thereby control the opening and closing of the bipropellant 
valves. The engine control valve is a solenoid valve that responds to commands from 


2-2 


USAO006500 
Rev. A 


the GPCs. Both engine control valves must operate in order for the bipropellant valves 
to open. 


After passing through the bipropellant valves, the oxidizer line runs directly to the engine 
injector plate. The fuel, however, is used to cool the engine, and so it is routed through 
a cooling jacket around the thrust chamber before it reaches the injector plate. A 
temperature sensor is located near the fuel inlet to the injector, and this temperature 
can be read on the BFS GNC Systems Summary 2 display (see Figure 2-3). This 
parameter does not appear on the PASS GNC Systems Summary 2 display (see 

Figure 2-4). 
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Figure 2-3. BFS GNC System Summary 2 display 
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Figure 2-4. PASS GNC System Summary 2 display 


Since the fuel injector temperature is the temperature of the fuel after it has passed 
through the chamber cooling jacket, it provides an indirect indication of the temperature 
of the thrust chamber walls. A high fuel injector temperature indicates that the engine 
may be sustaining thermal damage. The fuel normally flows to the engine ata 
temperature between 30° and 125° F. During engine operation, when the fuel is cooling 
the chamber, the fuel injector temperature should be approximately 202° Е. The 
temperature limit for safe operation is 260° F. 


The fuel and oxidizer are mixed at the injector plate in the thrust chamber. The 
propellants ignite on contact since they are hypergolic, and the resulting hot gas creates 
thrust as it exits the chamber and expands through the engine nozzle. The engine 
nozzle is connected to the thrust chamber. It is a lightweight aluminum alloy structure 
and does not have a cooling jacket. 


The pressure in the thrust chamber (Ре) is measured by a sensor displayed on MEDS 
OMS/MPS display (see Figure 2-5). The normal Pe during a burn is between 100 and 
106 percent, which corresponds to a pressure of approximately 130 psia. 


There are pressure sensors in the fuel and oxidizer lines just above the bipropellant 
valves. These inlet pressures are shown on the GNC Systems Summary 2 display (see 
Figure 2-6). When the OMS Engines are not burning, the inlet pressures should match 
the propellant tank pressures, which are normally 254 psi. During OMS burns, 
propellant flow into the thrust chamber causes the inlet pressure to drop to 
approximately 225 psi for the fuel and 200 psi for the oxidizer. 
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Figure 2-5. MEDS OMS/MPS display 


The inlet pressures are an indirect indication of propellant flow rates. If they are 
abnormal, then problems should be anticipated. An imbalance in the flow rates for fuel 
and oxidizer will result in an incorrect mixture ratio in the thrust chamber. If the mixture 
becomes fuel-rich, the chamber pressure and temperature will decrease and 
combustion will eventually be choked off. If the mixture becomes fuel-lean, the 
chamber temperature will increase and engine damage could result. If the fuel-lean 
condition is the result of a low fuel flow rate, the situation is especially serious, since the 
fuel is used to cool the outside of the thrust chamber. 
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Figure 2-6. GNC SYS Summ 2 (Engine Inlet Pressures) 


Engine Inlet Pressures: 
Right engine burning 
Left engine not burning 


Nitrogen System 


Gaseous nitrogen (GNz2) is used to operate the engine control valves as already 
described and also to purge the fuel lines at the end of each burn (see Figure 2-7). 
Each engine has a nitrogen supply tank that contains enough nitrogen to support about 
15 OMS burns. The nitrogen tank has an isolation valve called the nitrogen 
pressurization valve or № press valve. (This valve is sometimes called the engine 
press valve.) The М» press valve is controlled by the OMS engine switch on Panel СЗ. 
When this switch is in the ARM/PRESS position, the N» press valve opens. When the 
OMS engine switch is in any other position (ARM or OFF), the М» press valve remains 
closed. 


The OMS engine switch is normally placed in the ARM/PRESS position before each 
OMS burn and is left in the OFF position at all other times. The status of the Nz press 
valve can be seen on the GNC Systems Summary 2 display, which reads OP for open 
and CL for closed (see Figure 2-8). When the position of the OMS engine switch is 
changed, the display should be checked to see that the valve is in the proper position. 
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When the М» press valve is open, nitrogen can flow through the pressure regulator that 
reduces the nitrogen pressure from its tank pressure, which can be as high as 3000 
psig, to the proper working pressure of 325 psig. Below the regulator there is an 
accumulator, which is a reservoir containing a large enough volume of nitrogen to 
support one or two OMS burns, even if the М» press valve remains closed. The 
accumulator is protected from upstream leaks by a one-way check valve. From the 
accumulator, the nitrogen flows to the engine control valves, where it can be used to 
operate the bipropellant valve pistons. 


The second purpose of the nitrogen subsystem is to perform purges of the fuel lines 
following OMS burns. After an OMS burn, some fuel and oxidizer will be left in the 
engine inlet lines and will be subject to cold temperatures. The oxidizer does not 
present a problem, but the fuel, which has a higher freezing point, could freeze, 
especially in the cooling jacket around the thrust chamber. The frozen fuel will 
eventually sublimate, but for the first 10 minutes or so following a burn it might be 
dangerous to start another burn, since forcing more fuel into already frozen lines could 
cause damage. This situation is avoided by forcing nitrogen through the fuel lines 
immediately after the engine shuts down. This purge is part of the automatic OMS burn 
sequence and takes about 2 seconds. When a burn ends, the control valves close and 
the purge valves open. Nitrogen can then flow into the fuel line below the bipropellant 
valves, where it forces the remaining fuel through the inlet lines and cooling jacket and 
out through the engine. 
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Figure 2-7. Nitrogen system schematic and MEDS OMS/MPS 
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Figure 2-8. GNC System Summary 2 display/N; 


The purge is automatic only if the OMS engine switch is in the ARM/PRESS position 
and, therefore, when the М» press valve is open. For that reason, the crew should leave 
the OMS engine switches in ARM/PRESS for at least 2 seconds after an OMS burn so 
that the purge can be completed. When the М» press valve is open, nitrogen for the 
purge is supplied by the tank. If the М» press valve were closed, the purge would 
deplete the accumulator, and the OMS start capability of the accumulator would be lost. 
This is not normally a problem since the accumulator can be repressurized. But if the 
N» press valve were closed because of an upstream leak, it would be important to save 
the nitrogen in the accumulator. The purge is not as important as the need to preserve 
the engine restart capability. With the OMS engine switch in ARM or OFF, the М» press 
valve is closed and the engine purge is inhibited. 


The nitrogen tank has two independent pressure sensors. One is displayed on MEDS 
OMS/MPS and the other sensor can be found on the GNC System Summary 2 display 
(see Figure 2-7). There is also a pressure sensor located below the regulator and 
check valve. Its reading is found on the GNC System Summary 2 display as REG P, 
and it is an indication of the accumulator pressure. 
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OMS Engine Switches 


There are two sets of switches that are critical for OMS ignition: the OMS engine 
switches and the OMS engine valve switches (see Figure 2-9). There is an OMS 
engine valve switch for each engine (the switch for the left engine is on Panel O14, and 
the one for the right engine is on Panel O16). These switches provide power to the 
engine control valves and must be ON in order for the engine to burn. The nominal 
position of the OMS engine valve switch is ON for the entire mission. 


The OMS engine switches on Panel C3 have three positions, and each position is 
summarized below: 


ARM/PRESS: OMS ignition will occur, and the engine purge is enabled (the М» press 
valve is open) 


ARM: OMS ignition will occur but the engine purge will not occur (the М» press 
valve is closed) 


OFF: OMS ignition will not occur and therefore the purge will not occur either. 
If one of the switches is taken to OFF at any time during a burn, the 
appropriate engine will shut down immediately and no purge will occur. 
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Figure 2-9. OMS Engine and OMS Engine Valve switches 
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2.2 PROPELLANT AND HELIUM SUPPLY 


Helium Tanks 


Oxidizer and fuel are supplied to each OMS engine by separate sets of propellant tanks 
(see Figure 2-10). The OMS engine does not have fuel or oxidizer pumps, so the 
propellant flow must be maintained by keeping the tanks pressurized with helium. A 
single helium tank provides pressurization to the fuel and oxidizer tanks. One 
advantage to having a single helium tank in each pod is that it helps ensure that the two 
propellant tanks remain at the same pressure and thus avoids incorrect mixture ratios. 


The helium tank contains a supply of gaseous helium at a high pressure. The tank has 
two pressurization valves in a parallel arrangement: the A helium press valve and B 
helium press valve. This arrangement provides redundant paths for the helium to reach 
the propellant tanks. These valves are held closed by springs and are opened by 
electrical solenoids. The valves are controlled by switches on Panel O8 that have 
manual OPEN and CLOSE positions and also a GPC position that allows the GPCs to 
control the valves automatically. These valves are normally closed at all times except 
during OMS burns. If the switches are in the GPC position, the automatic OMS burn 
sequence opens the helium press valves at the start of a burn and closes them at the 
end of a burn. 


Below each helium press valve there is a pressure regulator that reduces the helium 
pressure from its value in the tank, which can be as high as 4800 psia (at launch) to a 
working pressure of approximately 250 psig. Below the regulators, the two helium lines 
rejoin and then split into one line that runs to the oxidizer tank and one line that runs to 
the fuel tank. There are one-way quad check valves in these lines to prevent oxidizer or 
fuel from flowing back into the helium lines or the helium tank. 


Over a long period of time it is possible for small amounts of propellant vapors to diffuse 
through the check valves and into the helium lines. If there were any mixing of the 
hypergolic propellant vapors in these lines, a reaction could occur. In order to minimize 
vapor diffusion, an additional set of isolation valves are therefore included in the line 
between the helium and the oxidizer tank. (The oxidizer was chosen because it has a 
higher vapor pressure than the fuel.) The vapor isolation valves provide a more positive 
seal than the check valves can. There are two valves in parallel so that if one vapor 
isolation valve gets stuck closed, one path will still remain open. The vapor isolation 
valves are controlled by the same switches as the helium press valves, which is why the 
switch is labeled "He PRESS/VAPOR ISOL” (see Figure 2-11). Both vapor isolation 
valves open automatically when either the A or the B helium press valve is opened. 

The vapor isolation valves close when both helium press valves are closed. 


There are two pressure sensors in the helium tank. One is displayed on MEDS 


OMS/MPS (see Figure 2-11), and the reading from the other sensor appears on the 
GNC Systems Summary 2 display (see Figure 2-12). 
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Figure 2-10. Propellant and helium supply schematic 
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Figure 2-11. He Press/Vapor Isolation switches and MEDS OMS/MPS display 


Propellant Tanks 


The fuel and oxidizer are stored in cylindrical tanks with a helium pressurization inlet at 
the forward end and a propellant outlet at the aft end. Since the OMS tanks are used in 
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a zero gravity environment, special provisions must be made to cause propellant to flow 
out without allowing helium to escape. Some space vehicles have used flexible 
bladders to push propellant out of their tanks, but this type of system was not 
considered durable enough for a reusable vehicle. Instead, the OMS tanks use the 
capillary action of the propellant along mesh screens at the aft end to capture the fluid 
and move it out of the tank. The acceleration during an OMS burn will cause the fluid to 
move to the aft end of the tank, thus aiding propellant acquisition. Of course, there is no 
acceleration before the start of a burn, so the tank was designed to ensure that the aft 
end would always contain some propellant. This was done by placing a mesh screen 
across the tank; this screen divides the tank into a forward and an aft compartment. 
The aft compartment includes about one-third of the volume of the tank and will be 
completely full at launch. As long as the screen remains wet, propellant can flow into 
the aft compartment but it is not likely to flow back into the forward compartment 
because of the surface tension of the fluid. 
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Figure 2-12. GNC System Summary 2 display (Tank Pressures) 


Once acceleration begins, propellant will flow from the forward compartment into the aft 
compartment, which should always remain full. Helium should remain confined to the 
forward compartment until the fluid is below the one-third level. When an OMS burn is 
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started with a low propellant level, the OMS burn should be preceded by a short burn 
with RCS jets to accelerate the vehicle slightly and cause the OMS propellant to settle 
to the aft end of the tanks. There can be problems with the propellant acquisition 
system in certain situations, and these constraints will be discussed later. 


Each of the propellant tanks has one pressure sensor. This sensor is wired directly to a 
gauge on Panel O3 (see Figure 2-13). The same measurement also appears on the 
GNC Systems Summary 2 display (see Figure 2-12). This is different from the OMS 
helium and nitrogen tanks for which the MEDS OMS/MPS and GNC SYS SUMM 2 
readouts come from two different sensors. 


There is a pressure relief valve for each of the propellant tanks located below the check 
valves. If the pressure in the tank exceeds 305 psig, a disk will rupture to relieve the 
pressure overboard. From then on, any overpressure will be relieved through a poppet 
valve that opens at 290 psig and reseats at 285 psig. 


The quantity of propellant in each tank is measured with a probe inside the tank. OMS 
quantity gauging is described later is this section. 


Each propellant tank has a set of tank isolation valves. These are the A and B tank 
isolation valves, and they are arranged in parallel to provide redundant paths for the 
propellant. The valves are driven open and closed by ac motors that normally use 
three-phase ac power but can operate on two-phase power. The tank isolation valves 
are controlled by switches on Panel O8 (see Figure 2-14). Each tank isolation valve 
switch controls one valve on the fuel side and one on the oxidizer side. The switches 
have manual OPEN and CLOSE positions and a GPC position that enables automatic 
control of the valves. 


Each switch has an associated talkback, which is an indicator above the switch showing 
the position of the valve (OP for open and CL for closed). When there is a mismatch in 
the positions of the fuel and oxidizer valves, the talkback will show a striped pattern 
called barberpole. The barberpole indication also appears momentarily whenever the 
valves are opening or closing. The tank isolation valves normally remain open 
throughout a mission. The redundant paths rejoin below the tank isolation valves, and 
the propellant lines continue to the bipropellant valve assembly. 
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Figure 2-13. RCS/OMS propellant tank pressure gauges on Panel O3 
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Figure 2-14. OMS tank isolation switches and talkbacks on Panel O8 
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Crossfeeds and Interconnects 


It is possible to feed the engine in one pod with propellant from the other pod. This is 
called an OMS crossfeed and would be done to balance the propellant weight in each 
pod or in situations where an OMS engine has failed. 


Crossfeed lines connect the left and right OMS propellant lines at a point between the 
tank isolation valves and the bipropellant valves (see Figure 2-15). Each crossfeed line 
has two crossfeed valves arranged in parallel to provide redundant paths for propellant 
flow. The valves and the switches that control them are similar to OMS tank isolation 
valves and switches. The switches are on Panel O8, and each one controls a valve in 
the fuel and oxidizer crossfeed lines. 


When a crossfeed is set up, the tank isolation valves on the receiving side are closed. 
(The OMS propellant tanks on each side should not be directly connected together in 
most cases.) The OMS crossfeed valves are then opened for the feeding and receiving 
side to establish a flow path from the OMS propellant tanks on one side and to the 
engine on the other side. 


It is also possible to feed OMS propellant to the aft RCS jets. This is called an OMS-to- 
RCS interconnect (it is not called a crossfeed). The RCS has its own crossfeed valves, 
which are similar to the OMS crossfeed valves and are used to crossfeed left and right 
RCS jets to a single set of propellant tanks. The same set of crossfeed lines are used 
for OMS crossfeeds, RCS crossfeeds, and OMS-to-RCS interconnects. 


When an OMS-to-RCS interconnect is set up, the RCS tank isolation valves are closed 
with switches on Panel O7. An OMS crossfeed valve on the feeding side is opened, 
and then the RCS crossfeed valve is opened. The OMS crossfeed valves on the 
nonfeeding side are kept closed. This sequence prevents a direct connection between 
the OMS and RCS tanks. Normally an interconnect involves one OMS pod feeding the 
RCS on both sides. This type of interconnect is used during orbit operations and is set 
up manually. The most important use of an OMS-to-RCS interconnect would be during 
an ascent abort, when the interconnect setup is automatic. Interconnects will be 
discussed in detail in a later section. 
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Figure 2-15. OMS and RCS crossfeed valves 
Quantity Gauging 


The gauging of OMS propellant quantity is accomplished by a combination of physical 
measurement with a probe inside the tank and computations performed by the gauge 
totalizer unit (see Figure 2-16). The probe is a rod that runs along the central axis of the 
propellant tank. It is divided into a forward probe and an aft probe. Both sections of the 
probe determine fluid level by measuring electrical capacitance within the probe; this 
measurement reflects the amount of the probe that is immersed in fluid. 


There is a problem with this gauging system, since in zero gravity propellant can float 
freely around in the tank and there may not be a clearly defined fluid level. For this 
reason, the gauging system updates the quantity value only when at least one OMS 
engine is burning. It does not update when a burn is done using only RCS jets. 
Between burns, the quantity value display remains static. Also, the probes do not 
provide a quantity measurement during the first 15 seconds after an OMS burn starts so 
that there is time for the vehicle acceleration to settle the propellants and thereby 
establish a measurable fluid level. In this 15-second period a burn integration 
computation is performed and provides updates to the meter on Panel O3. 


2-18 


USAO006500 
Rev. A 


' HEL IUM 


OMS/RCS QUANTITY 
GAGB 


Ungagable 


starts at 4596 FORWARD COMPARTMBNT 


FORWARD QUANTITY 


COMPUTAT ТОМ 
AFT QUANTITY 


AFT PROBB 
MBASURBMBNT 


BFS GNC SYS SUMM 2 


FORWARO QUANTITY PROBE 


Ungageable 
ends at 30% 


SCRBBN 

AFT COMPARTMBNT 
AFT QUANTITY PROBB 
ACOLIISITION SCRBBN 


' PROPELLANT 


006500014. ART, 1 
usa006500_037r1 tif 


Figure 2-16. OMS quantity gauging 


Another gauging problem arises when the fluid level is between 30 percent and 45 
percent. That range lies between the forward and the aft sections of the probe and is 
known as the ungaugable region. In the ungaugable region the propellant tank screen 
interferes with probe measurement, so the gauge totalizer unit computes a quantity 
based on a standard one-engine propellant flow rate. Once the ungaugable region is 
entered, the computation is used for 108 seconds, and then the aft probe takes over the 
gauging function. The OMS gauging function operates only when at least one OMS 


engine is turned on. 
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Figure 2-17. OMS/RCS quantity meter on Panel ОЗ 


The output of the gauge totalizer, whether it is the probe measurement or a computed 
value, is displayed on the digital meter of OMS/RCS propellant quantity on Panel O3 
(see Figure 2-17). A rotary switch below the meter is used to select either OMS oxidizer 
or OMS fuel for display. The meter shows the quantity in percent for the left and right 
sides and also the OMS kit if there is one being carried. The rotary switch is also used 
to select RCS quantities for display on the same meter. 


The GNC System Summary 2 display has a readout of the aft probe quantity (see 
Figure 2-18). This is a valid quantity measurement and is updated when at least one 
OMS engine is burning. Of course, it provides useful information only when the quantity 
is below the ungaugable region. As long as the propellant level is above the top of the 
aft probe, the display will read a static value of approximately 30 percent. 
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Figure 2-18. Quantity data on GNC System Summary 2 


2.3 THERMAL CONTROL 


The OMS pods are provided with insulation and electrical heaters to prevent the 
freezing of propellants in the lines while in orbit. The OMS heaters are divided into 
three segments: left pod, right pod, and crossfeed lines. Each segment has A and B 
heater circuits, which are controlled by switches on Panel A14 (see Figure 2-19). The 
switches have an AUTO position and an OFF position. In the AUTO position the 
heaters are controlled by thermostats that turn the heaters on and off to maintain 
temperatures between 55° and 90° F. In the OFF position the heaters remain off at all 
times. Only one of the two heaters circuits is used at one time. Heaters could burn out 
if the A and B circuits operated simultaneously, so some of the switches on this panel 
have protective covers to prevent heaters from being switched to AUTO inadvertently. 
There is a heater switch for the OMS kit, which will remain OFF. There are other 
switches on Panel A14 for RCS heaters. 
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RCS/OMS HEATERS 
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Figure 2-19. OMS heater switches on Panel A14 


The OMS thermal control system normally does not require very much attention from 
the crew. Temperatures are monitored by the GPCs, and when the temperature is 
above or below a preset limit an alarm sounds and a fault message appears on the 
appropriate displays. During orbit operations these alarms are generated by the GPC 
containing OPS 2 Systems Management (SM) software and by the BFS software during 
ascent and entry. When crewmembers observe an alert, they can look at the display to 
determine the location of the thermal problem. 
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During orbit operations the crew would use the Propellant Thermal display (SM SPEC 
89) (see Figure 2-20). The display lists the temperature measurements for many 
locations throughout the OMS pods. If there is a thermal alert, one or more of these 
temperature measurements will exceed the desired limit. Next to each temperature 
there is a status indicator that will either be blank if the temperature is in the normal 
range or indicate an M, 1, 1, Н, or L. An M stands for missing data and means that 
temperature data is not being received by the GPC. AT or | means that the 
temperature is above or below the specified normal range. An H or an L means that the 
temperature has reached or exceeded the high or low limit that can be measured by the 
sensor; it usually means that the sensor has failed. The temperature data in the left half 
and lower right corner of the display applies to areas covered by the left and right pod 
heater segments. The information in the upper right corner applies to the areas served 
by the crossfeed line heater segment. 
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Figure 2-20. SPEC 89 propellant thermal display 
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000 FERMA 004709359314 
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Figure 2-21. BFS thermal display 


The BFS Thermal display (BFS SM OPS 0) is available at any time when the BFS 
computer is in RUN or STANDBY, which includes the ascent and entry phases (see 
Figure 2-21). The display includes thermal data for several different systems, so the 
OMS pod temperature information is limited. The display does not provide numerical 
temperature data, but for each heater segment (left Pod, right pod, and crossfeed lines) 
there is a string of six or seven status indicators that correspond to a selected set of 
temperature sensors. The status field for each sensor will either be blank for normal or 
else display one of the indicators as described previously (M, l, Т, Н, L). The DPS 
Dictionary has a description of this display, which lists the parameters represented by 
the individual status indicators. 


2.4 THRUST VECTOR CONTROL 


The OMS engines are attached to the orbiter in gimbal mounts, which allow the engines 
to pivot up and down and from side to side (see Figure 2-22). Actuators driven by 
electric motors control the movement of the engines and provide steering capability 
during OMS burns. This is possible because each engine creates a thrust vector that 
can be pointed in a certain direction to cause the vehicle to rotate about its center of 
gravity (c.g.). Pointing the thrust vector to the side causes the vehicle to yaw. Pointing 
the thrust vector of one engine up and the other down causes the vehicle to roll. 


Normally, the orbiter is pointed in the proper direction at the start of a burn and only 
minor steering corrections are made during a burn with the OMS thrust vector control 
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(TVC) system. Control inputs come to the TVC actuators from the DAP. These 
commands can be based on automatic guidance or manual steering inputs from the 
rotational hand controller (RHC). 


LEFT OMS ENGINE RIGHT OMS ENGINE 


YAW ACTUATOR YAW ACTUATOR 


PITCH ACTUATOR PITCH ACTUATOR 


d. И" YAW ACTUATOR 
D~O 


gel. l GIMBAL RING 


PITCH ACTUATOR 


OMS ENGINE 
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Figure 2-22. OMS gimbal actuators 


Each OMS engine has two gimbal drive mechanisms for each axis: a primary gimbal 
system and a secondary gimbal system (see Figure 2-23). Each drives the actuators 
independently. If one system fails, the other can be selected to take over control. 
Gimbal selection is done by item entries to the Maneuver display. Item 28 selects the 
primary gimbal system for pitch and yaw for the left engine, Item 29 selects the primary 
for the right engine, Item 30 selects the secondary gimbal system for the left engine, 
and Item 31 selects the secondary for the right engine. Items 32 and 33 remove power 
from the gimbal systems for the left and right engines, respectively. Notice you can 
select primary for one engine and secondary for the other, but you cannot split pitch and 
yaw between primary and secondary systems. 


The flight control system sends out gimbal commands that are compared to the gimbal 
actuator positions. If there is an error greater than 0.4°, the actuators will be 
commanded to move the engine back to within 0.06? of the correct position. As long as 
the error is less than 0.4? there will be no actuator movement. 
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Figure 2-23. Actuator mechanism 


The range of gimbal movement for the OMS engines is +6° in pitch and +7° in yaw (see 
Figure 2-24). Assuming that the vehicle is pointed in the proper direction at the start of 
a burn, it is necessary only to position the OMS engines so that their combined thrust 
vector is aligned with the c.g. to keep the orbiter on course. The OMS engines are 
located above and to either side of the c.g., so they are mounted with their null axes 
pointed upward and outward. 


YAW PITCH 
+X 
LEFT RIGHT EM 
ax B 
y +6 ° 
bas ——@ = = —* +X <= 
HT. us palal 
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Figure 2-24. OMS gimbal degree-of-freedom 


The gimbal positions can be seen by the crew on the Maneuver display. The null 
positions in pitch and yaw correspond to zero degrees on this display. Gimbal positions 
on the Maneuver display are not useful as a flight control reference during a burn. 
Instead, the crew uses the attitude directional indicator (ADI) to monitor vehicle attitude 
and the attitude errors computed by Guidance, and this provides an indirect indication of 
proper TVC operations. 


For two-engine OMS burns it is more efficient to keep the thrust vectors parallel to each 
other so that the resultant vector is through the c.g. rather than to point both thrust 
vectors individually through the c.g. (see Figure 2-25). For parallel alignment, the 
gimbal angle for pitch is approximately zero since the null position in the pitch axis lies 
in about the same plane as the c.g. The null position for the yaw axis has the engines 
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pointed outward. To get the engine nozzles parallel in yaw they must be moved 6° 
inward, which is a yaw gimbal position of -6° for the left engine and + 6° for the right 
engine. 


For a single-engine burn the pitch gimbal angle would be the same as for a two-engine 
burn, but the yaw angle would be 6° outward, which is +6° for the left engine and -6° for 
the right engine (see Figure 2-25). The gimbal angles mentioned here are approximate; 
the values vary since the c.g. location depends on the vehicle configuration and 
propellant loading. 
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Figure 2-25. Gimbal positions during burns 


To keep the orbiter on course, the flight control system actively commands the OMS 
gimbals to point the thrust vector through the c.g., but to start a burn in an efficient 
manner the gimbals are preset to be properly aligned for ignition. These preset 
positions are called the gimbal trim angles and appear on the Maneuver display under 
TRIM LOAD. 
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In general, the trim load is set up using item entries to the Maneuver display: Item 6 for 
pitch (left and right are always the same), Item 7 for left yaw, and Item 8 for right yaw 
(see Figure 2-26). The OMS gimbals will move 15 seconds prior to ignition only if the 
actual position differs from the trim value by more than 0.4°. If the difference is less 
than that, there will be no gimbal movement before ignition. 


During the course of a burn, the c.g. will move slightly and the gimbals will remain 
trimmed as they respond to dynamic flight control commands. The gimbal positions 
existing at the end of any OMS burn, right before thrust tail-off, are stored by the 
computers. Whenever the Maneuver display is recalled, those stored gimbal positions 
are transferred to the trim load. 


In some cases, the trim load captured at the end of a burn is quite adequate for a 
subsequent burn and no manual changes to the trim load are required. Gimbal trim 
setup is handled in different ways for different OMS burns. 


30217 7 DEORB MNVR EXEC 1 004/10:00:42 


OMS BOTH 1ж 000/00:00:41 
L2 BURN RTT 
R3 24R 65 AVTOT 353,8 
RCS SEL 4 25P 40 TGO 3:40 
5 TV ROLL 180 26 Y 50 
TRIM LOAD HNVR 27 VCO X +345,89 
БР *0,0 TTG 00:00 Y -23.02 
7 LY -5.7 REI 4155 Z 370,73 
Gimbal trim load 8 RY 45,7 TFF 21:52 
9 WT 244663 GMBL HA HP 
10 TIG — L R TGT 161 +20 


. 4/10:00:00,0| P +0.0 40,0 | CUR 160 +138 
Y -5,7 +5,7 


TGT PEG 4 5.7 +, — 

14 Ci — 15910 per : Ж 

15 C2  -,6229| PR Current gimbal positions 
16 HT _65.800| SE 
17 eT 113,674] OFF 32 33 


19 AVX -226,7 
20 AVY -264,4 SURF DRIVE 
21 AZ +62,7 ON 39 
LORD 22/TIMER 23 OFF 40% 


Gimbal selection items 


EXEC 
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Figure 2-26. DEORB MNVR EXEC/gimbal positions 


To ensure proper alignment for OMS 2, a gimbal trim load is done in MM 105 using trim 
values listed in the Ascent Checklist. For subsequent burns the trim load will generally 
not require a change. The trim load captured at the end of a previous burn should be 
adequate unless there is a change to the engine selection, such as that required for a 
single-engine burn. 


The gimbal check (Item 34) commands the actuators to drive through their whole range 


of movement. When the gimbal check is active, an asterisk appears next to Item 34. 
The movement of the gimbals can be seen on the Maneuver display. The gimbal check 
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drives the gimbal system that is selected (primary or secondary) in both the pitch and 
yaw directions. When the check is complete, the asterisk will disappear. 


Normally, the gimbal check is done before or after each OMS burn. The secondary 
gimbals are checked first, followed by the primary gimbal system. A gimbal check 
should never be executed during a burn. If it were, the gimbal check commands would 
override the flight control commands, causing obvious control problems. 


2.5 OMS DISPLAYS 


This section is a summary of all of the displays that are related to OMS operation. We 
will discuss the MNVR display, GNC SYS SUMM 2, Thermal displays and RCS 
SPEC 23. 


Maneuver Display 


The maneuver display appears automatically in MMs 104, 105, 106, 202, 301, 302, and 
303. The title has a prefix and a suffix that vary according to major mode and are listed 
below in Table 2-1. The items on this display that are relevant to OMS burns will be 
described briefly. 


Table 2-1. OMS maneuver displays 


DEORB MNVR EXEC Deorbit burn 
EORB MNVR COAST | Post-deorbit coast 


Demum — 
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Figure 2-27. DEORB MNVR EXEC 


Items 1 through 4 are mutually exclusive and used to target a two engine, one engine or 
RCS burn (see Figure 2-28). 


OMS BOTH 1^ 
L2 
R3 

RCS SEL 4 


Item 5 is the roll attitude for OMS burns. Normally it is 180°, which corresponds to a 
heads-down attitude. 


5 TV ROLL 180 


Items 6 through 8 are used to enter gimbal trim angles for OMS burns. 


TRIM LOAD 
6P [+04 
7LY [] 57 
8RY [4] 5.7 


Item 9 is the current weight of the orbiter in pounds. 


9WT 245700 
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Item 10 is the time of ignition for an OMS burn in days/hours: minutes: seconds of 
mission elapsed time (MET). TIG is a critical component of the burn target. 


10 TIG 
4/10:00:00 


The target parameters for powered explicit guidance (PEG) are entered with items 14 
through 18. This type of guidance (PEG 4) places the orbiter on course for a specific 
point in space and is normally used for OMS 2, and deorbit burns. PEG 4 targets can 
be used only in OPS 1 and 3. 


TGT PEG 4 
14 C1 
15 C2 
16 HT 
17 eT 
18 PRPLT 


Items 19 through 21 are the target LVLH parameters for PEG 7 or external AV 
guidance. It is used to add or subtract orbital velocity and does not target the vehicle for 
a specific point in space. PEG 7 targets can be used in OPS 1, 2, or 3. 


TGT PEG 7 
19 AVX 
20 AVY 
21 AVZ 


Executing Item 22 causes Guidance to compute a burn solution on the basis of the 
target parameters that have been entered under PEG 4 or PEG 7. Executing Item 23 
sets up a timer, which counts down to TIG and is displayed on the second line at the 
upper right corner of the display. 


LOAD 22/TIMER 23 


Items 24 through 26 are the desired inertial attitude for the OMS burn which Guidance 
computes as part of the burn solution. Executing Item 27 causes an automatic 
maneuver to this pre-burn attitude. TTG will count down to maneuver complete, and 
time field will blank when in attitude. 


BURN ATT 
24 R 065 
25 P 040 
26 Y 050 

MNVR 27 

TTG 00:00 


2-31 


USA006500 
Rev. A 


The actual gimbal position angles are shown in the middle of the display. 


GMBL 

L R 
P *0.0 +0.0 
Y -5.7 +5.7 


Items 28 through 31 permit selection of primary or secondary gimbal drivers. Items 32 
and 33 will power OFF the respective drivers. 


PRI 28* 28” 
SEC 30 31 
OFF 32 33 


Executing Item 34 starts an automatic gimbal check sequence. 
GMBL CK 34 


EXEC flashes on the screen 15 seconds before TIG and remains there until the EXEC 
key is depressed, enabling OMS burn ignition. 


EXEC 


AVTOT is the total change in the body axis velocity needed to satisfy the target 
requirements. TGO is the expected duration of the burn. Below that are the X, Y, and Z 
components of AVTOT. All this is computed by Guidance when a target is loaded. 


AVTOT 396.3 


TGO 4:07 
VGOX + 387.26 
Y - 27.20 
Z+ 79.88 


TGT HA and HP are the altitudes in nautical miles of the apogee and perigee for the 
orbit that will result from the successful completion of the targeted OMS burn. CUR HA 
and HP are the current apogee and perigee altitudes. 


HA HP 
TGT 161 +20 
CUR 160 +154 


Item 35 permits entry of a stored PEG 4 target for OMS 1 or OMS 2 with a single 
keystroke. It is used primarily for calling up abort to orbit (ATO) and abort once around 
(AOA) targets. 


35 ABORT TGT 
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GNC Systems Summary 2 Display 


There is a PASS and a BFS version of GNC Systems Summary 2 display (see 

Figure 2-29). The two displays are similar, but the BFS display contains some 
additional information. These displays can be called up by pressing the SYS SUMM 
key twice (the first time calls up SYS SUMM 1). Aless convenient way to call them up 
is with a keyboard entry of "SPEC 19 PRO.” The BFS display is the only one available 
during ascent and entry, and the PASS display is the only one normally available during 
the orbit phase. The majority of the display contains RCS information. The OMS 
information along the top and right side has already been discussed. You should keep 
in mind that for OMS burns done in OPS 2, the fuel injector temperatures will not be 
available on the display. 
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Figure 2-28. PASS and BFS GNC System Summary 2 displays 
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Thermal Displays 


The Propellant Thermal display can be called up in OPS 2 with a keyboard entry of 
“SPEC 89 PRO” to a CRT MDU with the SM major function selected. Note that it shows 
fuel injector temperatures (ENG FU INJ) for the left and right OMS engines. 


The BFS Thermal display is displayed automatically when the BFS computer is in RUN 
or STNDBY and the SM major function is selected. The OMS pod temperature status is 
displayed below HRT TEMP PRPLT. 


20117  /089 PRPLT THERM 4 000/02:02:07 
SM OPS 2 Ж РО 000/00:00:00 
Fu 


Fuel Injector Temp 


BFS 
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Figure 2-29. Propellant Thermal and BFS Thermal displays 
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RCS Display 


SPEC 23 is prime for RCS pod specific data. However, in the upper right corner there 
are some items related to OMS gauging for OMS-to-RCS interconnect operations. 


Left RCS pod 4 2011/023/ RCS 2 010/13:21:28 D 
selected 000/00: 11: 28 
F 1 4 PR FAIL LIM 2|L 0М5- | R ОМ5- 
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OFF 7X 50R 70,00 
JET|FAIL |DES| ЈЕТ |РТҮ 48 PRESS ENA of OMS propellant 
NH|DES OXID|FU burned through RCS 
ЕЕ 81513 НЕ Р|2912 [2816 
2L 10 |11 | 2 PRPLT TK P| 245 | 250 jets 
Y 3L 2 |13|1 80 | 80 
LL а |15 | 4 aty| 67 | 68 
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ITEM 2 EXEC 
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Figure 2-30. SPEC 23 
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QUESTIONS 


If an OMS engine is shut down during a burn by taking the OMS engine switch to 
OFF, will a purge occur? 


If the left OMS engine switch is in the ARM position and the right is in OFF, 
(a) Will the left OMS engine ignite at TIG? 

(b) Will the left OMS engine have a purge at the end of the burn? 

(c) Will OMS gauging work for the left pod? 

(d) Will OMS gauging work for the right pod? 


If the A helium press valve is closed and the B helium press valve is open, which 
vapor isolation valves will be open? 


If an OMS engine failed during a 2 Engine OMS burn, would you expect the larger 
attitude change to be in the pitch axis or the yaw axis? Where would you look to 
observe this change? 


If both OMS engines are OFF and OMS propellant is being fed to the RCS jets, 
does the BFS GNC Systems Summary 2 display provide any information on OMS 
quantity? 


If the left OMS engine valve switch on Panel O14 is turned off during a burn, will the 
engine stop burning immediately? 


If there is a pitch gimbal error of 0.56? and a yaw error of 0.399, will either actuator 
be moved to correct errors and if so how much movement will there be? 
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Use the example GNC Systems Summary 2 display (see Figure 2-31) to answer the 


following questions. 
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Figure 2-31. GNC Systems Summary 2/Questions 


8. Are both OMS engines burning? 
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2 000702306315 


000/00:00:14 

0М5 L R 
TKP HE 401 3890 
OXID 253 250 
FU 253 250 
№ ТК P 2290 20} 
REG P 328 331 
Рм OP CL 

ENG IN P 

OXID 202 202 
FU 222 225 
VLV 1 100 100 


100 


U FRI 


100 
1501. 
VLV 


ОР 
ОР 
ОР 
ОР 
ОР 


9. According to the display, the left OMS helium tank pressure is at 40 psi. Is there а 


way to double-check this reading? 


10. According to the display, the left N2 press valve is open. How could you close it 


without turning off the OMS engine? 


11. According to the display, the right OMS М; tank pressure is at 20 psi. How could 


one verify this failure? 
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3.0 INTRODUCTION TO SYSTEM OPERATIONS 


In this section seven nominal events and their associated procedures will be discussed. 
3.1 OMS 2 Burn 

3.2 Orbit OMS Burns 

3.3 Deorbit Burn 

3.4 Orbit OMS-to-RCS Interconnect 

3.5 OMS Assist and Abort Dumps 

3.6 OMS Switch Configurations 


3.7 Constraints and Limitations 


3.1 OMS 2 BURN 


The OMS 2 burn is done at the apogee of the elliptical orbit established by MECO. This 
posigrade burn raises the perigee altitude and creates a circular orbit. For ISS flights 
the OMS 2 burn occurs roughly 40 minutes MET. The Ascent Checklist contains the 
procedures necessary to target and configure the majority of the OMS for the upcoming 
burn. At TIG-4 minutes a transition is made to OMS2/Orbit OMS BURNS card. This 
card will focus the crew and clean up any outstanding switch throws prior to ignition. 
The operational highlights of this procedure are noted in the margins. (See Figure 3-1) 
All FDF procedures should be worked thoroughly and sequentially. We will mention a 
few critical tasks that should be re-checked prior to executing any OMS burn. A good 
habit pattern is to first check that targets are loaded and the shuttle is in the proper pre- 
burn attitude. Second, look up on Panel O8 and confirm there is a good propellant path 
to the engine. Verify the Helium/Press Vapor Isolation switches match the configuration 
on the card. Also make sure the tank isolation talkbacks are open. Third, check that 
the DAP is in AUTO, and finally make sure the OMS Engine switches on C3 are in 
ARM/PRESS. Do not overlook the giant warning box in middle of the card. Do not burn 
an OMS engine if any pressures violate these limits (start box). Authorization of the 
burn will occur with the EXEC key. At TIG, the crew will monitor OMS Pc, delta VTOT 
clocking down and confirm that the bipropellant valves are open (10096). There is a 
stop/continue cue based on current Hp. If no failures are encountered then cut-off 
should occur on time with targets achieved. Allow 2 seconds for the nitrogen purge to 
take place prior to taking both OMS engine switches to OFF. Finally, remember to trim 
residuals per requirements at the bottom of the card. 


3-1 


Check burn attitude 


Cut-off and 
nitrogen purge 


USAO006500 
Rev. A 


OMS 2/ORBIT OMS BURNS 


У MM105/202(302) 
Enter TGO *5 sec (2 eng) or TGO *10 sec (1 eng) 
V BURN АТТ (INRTL) then REF, pb — push 


VENG SEL УРАР TRA S — NORM (ММ202) 
CNTL PWR (two) - ОМ УРАР - AUTO(PASS)/DISC 
V GMBL TRIM — — — DAP in AUTO 


2епдіпе: Р=+04 LY = -5.7 RY= *5.7 
1 епдіпе: P=+0.4 LY = +5.2 RY = -5.2 
L,R OMS He PRESS/VAP ISOL А (two) - 


.. Wait 2 sec... 
L.R OMS HE PRESS/VAP ISOL В (two) – GPC (OP for SE 
GPC ОР CL bum) 
ORB BURN A 
B 


TIG-2 SEL OMS ENG(s) - ARM/PRESS (7P VLVs OP) 


IfPVLV CL: Aff OMS ENG - OFF W— 0-0 OMS Engine switches to 
ARM/PRESS 


Do not burn aff engine if: 
OMS N2 TK P « ee (NONCRIT BURN) 
640 


He TKP < 
FU ENG IN P < 216(244) 
OX ENG IN P < 151(244) 


AVTOT: OMS XFEED RETURN (Planned Single 
Engine) 


—=:15 EXEC 
If OMS ENG Ре MSG and non critical bum: Aff ENG — OFF 
If Leaking OMS PROP, burn RCS *X TIG - 15 sec to 
OMS IGN * 1 sec 
:00 — TIG; start watch (Pc. AVTOT, ENG VLVs) 
2 Б. Р T FAIL x 
2 | (CONTINUE BURN): ; 
н на SENG = be EN Е Stop/Continue cue 
wo - 

* TKISOL(wo) - CL + based on Hp 
Б He PRESS (two М 
* HP > [85] (STOP BURN): Ў 
* OMS ENG (two) – OFF * 
* V Failed OMS XFEED (two) - CL * 
* TKISOL(two – CL А 
* HePRESS (two) — CL * 
+ OMS ENG FAIL: * 
* ASCENT or CRIT Qu (Continue Burn) * 
* Failed ENG — OFF * 
* OMS XFEED at —9 1/2 av | |] . 
* at FAIL * 
+ RCS COMPLETION: (нр < [85] or CRIT O/O) > 
* Interconnect to either OMS that was ENG FAIL + 
* THC +X (Hp = [85]) * 
* Post burn, AFT RCS RECONFIG * 

CUTOFF 

+02 OMS ENG(s) - OFF (if <3 IMU, at ГИ T b 

rm 


MS ONLY 


TAIL ONLY CNTL 


| | OMS2 | | Orbit — | 
Residuals: V60 X <0.2fps | VGO X < «0.2 fps All axes « 0.2 fps 
VGO Y Z < 2 fps 


ASC-6a/114/A,O/A 
А5С/114/ҒІМ 
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Figure 3-1. OMS 2/Orbit OMS Burn card 
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OMS burns will be required during orbit operations to raise and lower the orbital altitude 
as part of the rendezvous. The procedures for an OMS burn in OPS 2 are located in 
the ORBIT OPS Checklist. The ON-ORBIT OMS BURN procedure transitions to the 
OMS 2/ORBIT OMS BURN cue card 4 minutes prior to TIG. This is the same cue card 
used for the OMS 2 Burn (Figure 3-1). Three cues listed on this card are unique to OPS 
2. The major mode setting, the configuration of the DAP panel on C3 and the orbit trim 
residuals. An orbit burn must be performed in MM 202 as shown at the top of the card. 
This major mode, MNVR EXEC contains all the appropriate software modules needed 
to execute a burn. Check that the translation mode of the DAP is in NORM. (If RCS 
completion is required, then the X RCS jets need to be fired continuously versus the 
default OPS 2 pulse mode.) The warning box and the stop/continue cues still apply on 
orbit. Also note the tighter trim requirements of .2 fps in all axes once the cut-off and 


purge has occurred. 


An Orbit MNVR EXEC is shown in Figure 3-2. The burn targets will be provided by 
MCC. All orbit burns are done using a PEG 7 target. PEG 4 is not available in OPS 2. 


20217 / 

OMS BOTH 1ж 
L2 
R3 

RCS SEL 4 

5 TV ROLL 0 

TRIM LOAD 

БР *0.4 

7 LY -5.7 

8 RY 45,7 

9 UT 246200 


18 PRPLT 
ТОТ PEG 7 
19 AVX 
20 AVY 
21 Ач? 
LORD 22/TIMER 23 


+20,0 


RESUME 


ORBIT MNVR EXEC 


BURN RTT 


HNVR 2? AUTO 
TTG 
REI 
ТТА 44:14 
GMBL 
L R 
P +0,4 %0,4 
Ү-5,7 жы 


PRI 28% 29% 
SEC 30 31 
OFF 32 33 
GMEL CK 34 


EXT Av 


1 000/02:05:55 

000/00:00:06 
ЕХЕС 
13,3 
0:12 


AVTOT Flashing EXEC 


m Need to press the 


EXEC button to 


ш в. enable the burn 


Y | -0.36 
Z 36,34 


HA Ж 
TGT 177 +150 
CUR 165 +160 


35 ABORT TGT 0 


FWD RCS 
ARM 35 
DUMP 37 
OFF  38* 
SURF DRIVE 
ON 33 
OFF 40% 


PEG 7 targets 
(PEG 4 targets not 
available in OPS 2) 
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Figure 3-2. Orbit Maneuver EXEC display MM202 
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3.3 DEORBIT BURN 


The final use of the OMS during a mission is to accomplish the deorbit burn. A 
retrograde burn is performed, decreasing orbital velocity and lowering the perigee 
altitude to nearly zero. A nominal end of mission deorbit burn to KSC will occur over the 
Indian Ocean and last about three minutes. The procedures for the deorbit burn are 
covered in the Deorbit Prep Checklist and the Entry Checklist. A special burn card is 
used based on the Deorbit options available. Figure 3-3 shows the nominal 2 engine 
deorbit burn card. The format is slightly different from the OMS 2/Orbit Burn card, but 
the same critical actions apply. The majority of the card is reserved for failures 
encountered during the burn. The stop or continue cues are once again based on 
current perigee. Safe Hp, (nominally 80 nm) is the point of no return. If a critical failure 
happens above this altitude the vehicle can remain on orbit for several revolutions. If 
current Hp is below 80 nm when the failure occurs, the burn is continued using RCS jets 
and propellant if required to achieve the final targets. 


DEORBIT BURN (2 ENG) 


vMM302 — “OMS BOTH 
Enter TGO * 5 sec 
: “TRIM per MNVR PAD or P 40.0, LY -5.7, RY +5.7 
Check burn attitude es ER OMS He PRESSIVAP ISOL A (two) - GPC 
E (мо) - OF 
“DAP — AUTC(PASS)DISC 
1 — LVLHG i І . 
FLTONTLREWR eee} OH — OMS Engine switches to 
TIG-2.— OMS ENG (twa) - ARM/PRESS ARM/PRESS 
— 15 EXEC (NO EXEC > TIG + 
- 19 If OMS AFT QTY < 11%, THO +x lo OMS GN *1sec 
00 TIG Start watch (УРс, ere ENG М5) 
If no OMS ignition: APUs - SHUT DI 
; OMS PRPLT FAIL: 


Failed OMS CNG - OFF 
STOP BURN. 
LOMS ROMS Good OMS ENG - OFF н 
*  FAILHP РАШ НР APUs – SHUT DN : 
* Secure aff OMS Ж 
р * 
ы CONTINUE BURN: 4 
Ы ITEM 1& -0 EXEC * 
З When good OMS QTY: * 


5%: L,R OMS XFEED (four) - OP x 
4%: Good OMS TK SOL (two) — CL 
If OMS Pc = 00 е OMS ТЕМР, 


OMS ENG — 
* “ADI — LVLH, c carer needles * 
* RCS COMPLETION * 
~ OMS ENG FAIL: М 
Failed OMS ENG - OFF * 


OMS XFEED al 1/2 AVIOT at fail — 
or OMS CTY [ы "eL or % К 


* 2nd OMS FAIL (ENG or PRPLT}: 
^ Failed OMS ENG - OFF 


V PRPLT FAIL: 
< Secure aff OMS 
# ITEM 18 e EXEC 
Roth it 
ENG FAIL PRPLT FAIL 
H (SAFE) НР STOP BURN: ж 
Ж (ЕЗІН APUs - SHUT ON * 
* 
CONTINLIE BURN: * 
Y ADI — LVLH, appo * 
Interzonnecl goo: cs 


THC +X (OMS% үз + RCS Burn Time) 
RCS l'CNCT TK SW (M/A PRPLT FAIL; 
THC *X (YOMS% vs RCS Bum Time) * 
“ AFT RCS RECONFIG 
в RCS COMPLETION * 


ENT-4a/D/K П 
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Figure 3-3. Deorbit Burn (2 ENG) card 
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At AFT QTY 1 TOT AFT QTY 2 


PREBANK/FLIP 
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THC +X to PREBANK/FLIP HP or 


if CUR HP: PREBANK/FRCS COMPLETION 
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HP 
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HF 
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Set ee eh RE я + + + 


nitrogen purge = 


MNVR to —X Att (pitch up at 3°/sec іс VGOz = *1/4 AVTOT) 
THC -X to ТОТ HP or FRCS depletion (JETS FAIL OFF) 


* E X0 X ee ee 


CUTOFF | | 
+ :02 OMSENG(s) — OFF (If < 3 IMU, at . ) 


* AFT RCS RECONFIG if INTERCONNECT * 
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Figure 3-4. Deorbit Burn (2 ENG) card (cont.) 


3.4 ORBIT OMS-TO-RCS INTERCONNECT OPERATIONS 
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The orbit interconnect is a manual procedure done to conserve RCS propellant for 


entry. Plans for an interconnect will vary from flight to flight and will depend on 


propellant loading and the in-flight assessment of propellant usage. The procedure for 
a Left OMS to RCS interconnect from the Orbit Pocket Checklist is shown below. (See 


Figure 3-5). 


l'CNCT: L OMS to RCS 


We NS 


NOTE 
Gauging not avail in OPS 3 


DAP: FREE 
L,R RCS TK ISOL (six) — CL (tb-CL) 
XFEED (four) — OP (tb-OP) 


If RCS MANF P (OX and FU) > 130 continue; 


otherwise, VMCC >> 
NL OMS He PRESS/VAP ISOL (two) — CL 
TK ISOL (two) — OP (tb-OP) 
NR OMS XFEED (two) — CL (tb-CL) 
L OMS XFEED A - CL (tb-CL) 
B — OP (tb-OP) 
L OMS TO AFT - ITEM 5 EXEC 
DAP: as reqd 


GNC 23 RCS 


Figure 3-5. Interconnect L OMS to RCS 
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Free drift is selected on the DAP so that no jets will be commanded to fire. When the 
procedure is complete, the final talkback configuration should correspond to Figure 3-6. 
One can follow the propellant flow from the Left OMS to the Left and Right RCS 
manifolds through the OMS B crossfeed valves. The OMS A crossfeed valves are kept 
closed, because a single electrical bus failure could cause the loss of operation of the 
crossfeed valves and the OMS tank isolation valves, leaving no means of isolating the 
OMS from the RCS. This situation does not occur with the B crossfeed valves, because 
the arrangement of electrical busses is different. 


Normal Feed 


isi 
ali 
Yi 
j 


Tank isol 1/2 Sees 2m AE 
ОР! АО А|ОР ВІОР| А(ОР B'OP 
cant Manifolds | m Manifolds c | | { | A | | | 
1/2 3/415 [CL] 1/2[СЕ 3/4/5([CL] A[CL] BCL ACL]  B[CL 


Interconnect: Left OMS to RCS 


Sl 
is |; 
В 
i 


Tank isol v ET е 
c B. CL ay BI CL А(ОР BIOP| ДОР BIOP 
Crossfeed| Manifolds | | | Manifolds | A | | A | 
1/2 [0P 3/4/5 [OP] 1/2[ОР 3/4/5[0P] А(СІ| B[OP ACL] B[CL 


Interconnect: Ascent Abort Sequence 


ЕТ 
НШІ! 
н 
i 


Tank isol 11. 1/2 gu 
c BI CL CL| AC BI CL А(ОР BIOP| ДОР BIOP 
Crossfeed| Manifolds | | | Manifolds | A | | A | 
1/2 [0P 3/415 [OP] 1/2[ОР ajas [OP] A[cL| В(ОР A|CcL] B[OP 
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Figure 3-6. OMS/RCS crossfeed and interconnects 
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NH|DES OXID|FU ; 
LAL 81913 НЕ Р|2912 |2816 ie ese 
21 О |11 2 PRPLT TK Р| 245 250 
12310. 221.13 Т 80 80 
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L4U 6 |17 3 MANF P 1| 246 246 
2U 8 119 2 2| 246 250 
Z 1U 20 |21 3| 248 250 
L 22 |23 4| 246 250 
4D 24 25 MANF VLVS STAT)! OVRD 
2D 26 |2T 2 1 OP 4Q 
3D 28 |29 3 2 OP 41 
L3A 30 |31 3 OP 42 
X 1A $2" БЕ 4 OP 43 
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LSL $6 |31 AFT XFD P 254 254 
V 5D 38 |39 JET RESET 45 


ITEM 2 EXEC 
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Figure 3-7. SPEC 23 L РОР L OMS interconnect 
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The OMS gauges will not track real time OMS propellant usage through RCS jets. The 
gauges will update once an OMS burn is started, but the quantity will remain static while 
the OMS Engine switches on Panel C3 are OFF. In order to keep account of OMS 
propellant burned through RCS jets, the L OMS to AFT function must be enabled. This 
gauging function will use a count of RCS jet firings to compute the amount of OMS 
propellant consumed. Figure 3-7 shows that 2.1196 of OMS propellant has been burned 
through the RCS jets. 
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3.5 OMS ASSIST AND ABORT DUMPS 


Nominal ascents and aborts have an automatic software sequence that will burn OMS 
propellant to reduce vehicle weight. This reduction in weight will increase performance 
pre-MECO. Since these burns are done during powered flight, the term “dump” is 
commonly used. We will discuss only two specific dump configurations: the OMS 
Assist and the RTLS abort dump. 


OMS Assist 


The OMS assist is a nominal OMS dump that will occur shortly after SRB separation. It 
is a straight feed 2 OMS engine burn. Specific mission requirements will determine the 
length. The duration is shown at the bottom of the OMS 1/2 TGTING card (see 

Figure 3-8). 


Duration of OMS 
POST NOMNAL % OMS/SIDE DUMP TIME po ыи ASSIST 
TP qe uc apean 


FB 2-7 ASC/114/FIN 3 


usa006500_035r1.tif 
Figure 3-8. Bottom of OMS 1/2 TGTING CARD 


The monitoring procedure for the OMS assist is shown in the ASCENT PROCEDURES 
as check OMS assist (Figure 3-9). Three tasks are required by the crew in order to 
complete this check. First, check for nominal OMS engine chamber pressures on the 
MEDS OMS/MPS display. Second, call up BFS SYS SUMM 2 and take a look at the 
steady state oxidizer and fuel engine inlet pressures. These inlet pressures will be used 
to diagnose a potential blockage or failure during the OMS assist. Lastly, start a timer 
as a back up against potential OMS gauging failures. Once this initial check is complete 
the crew can return to nominal uphill monitoring tasks. The final and most often missed 
task is to stop the timer once the OMS assist is completed. 


ASCENT PROCEDURES 
R180 LVLH 


.83M Уре ә 72% | 
Monitoring task 1.17M YP. — 104% 
for OMS ASSIST Рс < 50+5 ѕ “SRB SEP (Backup AUTO SEP 2:21) 


УТМЕСО 


* If NOT STABLE (10 sec): ^ 
NO COMM - CSS & MAN THROT » 
MM103+10 s YOMS assist 
Close suit O2, open visor 
3:00 УЕУАР OUT (T < 60) 


usa006500_036r1 tif 


Figure 3-9. Ascent Procedures 
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RTLS Dump 


The primary objective of the RTLS abort dump is to burn the OMS propellant to get the 
oxidizer and fuel tanks below the tank landing constraints. (TLC nominally « 2296 
OMS). This will also reduce the overall landing weight and bring the c.g. into the 
nominal envelope. In order to dump this large quantity of OMS propellant pre-MECO, 
the nominal RTLS dump configuration will use 2 OMS Engines *24 RCS jets. When the 
RTLS abort is executed, the valve re-configuration will happen automatically. Figure 3-6 
shows the OMS and RCS talkbacks once the interconnect sequence is completed. 

With all six of the RCS tank isolations closed, one can see how the OMS propellant is 
fed to the RCS manifolds. A typical RTLS 2 OMS + 24 RCS jet dump will last around 
200 seconds. The monitoring task is listed on the RTLS PLT procedures (see Figure 3- 
10). Only two steps are implied in this check. They are the standard OMS burn 
monitoring tasks - check for nominal OMS engine chamber pressures and note the 
steady state engine inlet pressures. 


Monitoring task | 
for RTLS dump RTLS PLT 
If CSS: MAN THROT 


Man MECO 
YP. = 104% (2 eng)/6996 (3 eng) 
/ DUMP 
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Figure 3-10. RTLS PLT procedure 


3.6 OMS SWITCH CONFIGURATIONS 


The configuration of OMS switches is presented for the three main phases of flight: 
ascent, orbit, and entry. Three specific OMS related panels that do not change during 
the mission will be discussed first. 


Panel MA73C 


The aft pod valve logic switches are always ON, and the aft pod valve circuit breakers 
are always pushed in. The switches provided main bus power to logic relays within the 
motor control assemblies, and the circuit breakers control the flow of ac power to the 
motors that open and close the valves. The OMS kit valve circuit breakers are left out, 
and the OMS kit valve logic switch is left off. 
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Figure 3-11. Panel MA73C 


Panel 014 


Only the bottom row (row F) of switches on this panel is shown. It contains the left OMS 
engine valve switch, which is always ON. This switch provides a power to the engine 
control valves for the left OMS engine and must be ON for the engine to fire. 


[————— Rupa 1А T RJDA 2A T RJDF 1B————34 
MAU L2/R2 МАМЕ L4/R4 MANF FL МАМЕ L OMS us © 
1 LOGIC DRIVER LOGIC DRIVER LOGIC DRIVER ENG WLV 
ON ON ON 
($13) 1531 1541 rm үт (sD e ( vt 
OFF OFF OFF OFF 
MMU [L ENG viv] [L Enc viv] VLV % 
Ре Т та, 
© 


Figure 3-12. Panel O14 
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Panel O16 


Only the bottom two rows (row E & F) are shown. The bottom row contains the right 
OMS engine valve switch and serves the same purpose for the right OMS engine as the 
Panel O14 switch does for the left engine. The switch is always ON. The row above is 
the RCS/OMS propellant quantity gauge circuit breaker. This circuit breaker controls 
the flow of electrical power to the OMS gauge equipment and is pushed in at all times. 


RCS/ OMS ORAG 
MLS. r ADTA 1 [ DDLI 1 PRPLT QTY CHUTE 
3 4 RIGHT AFT GAUGE SYS 1 


3 
ЭРІСІП ШЕ elle ellole & 
+ SED || NSS" || SS + NA | SZ SEI PN 
(CBL8I 4¢B19) (C820) (B22) ¢CB23) (28241 ‹ СВ32) 

r RJDA 28 T RJOF 2A T RUOF 2B 1 RJO МАМЕ D 
L3/R3/R5S- MANF- L3/R3 F3 MANF Ғ4/Е8- MANF- Fd R OMS (a a ACCEL L5/F&/R& z 
LOGIC DRIVER LOGIC DRIVER LOGIC DRIVER ENG VLV 3 4 3 DRIVER 

ON DN ON ON ON ON ON 
== (061) 
1532 1541 51541 156) 1813) (57) 158) 1581 1514) 4515) 
OFF OFF OFF OFF OFF OFF OFF 
L3/R3/RS 3783 F3 FA/FS| F4 R DMS ASA ACCEL L5/FB/RE 
Жы ENG ММ 
CD @ 


Figure 3-13. Panel 016 


Configuration for Ascent 


The OMS and RCS switches are configured for ascent to support an immediate OMS 
burn and an automatic OMS-to-RCS interconnect in case an abort dump is required. 
The need for switch changes during ascent is minimized because the crew reach and 
visibility envelope can be rather limited. 


Panel O7 


The four RCS helium press switches are OPEN with talkbacks showing OPEN. These 
valves are normally open whenever the RCS is needed, which includes the RCS 
maneuver ET separation, and for control during an RTLS or TAL. 


The six RCS tank isolation valves are in the GPC position, and the talkbacks indicate 
that the valves are OPEN. As long as the switches are in the GPC position, they can be 
automatically configured for an abort dump 


The ten RCS manifold isolation switches are in the GPC position with the talkbacks 
OPEN. 


The four RCS crossfeed switches are in the GPC position so that the valves can be 


configured automatically for an abort dump. The talkbacks indicate that the valves are 
closed, which is their nominal position. 
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The RCS master crossfeed switch normally stays in the OFF position. This switch 
affects RCS valves only and is not nominally used in the ascent phase. 


m cn 19 
@ 7———— AFT їзєт RCS m AFT RIGHT RCS —— — — —3À O 
на m 


= т 
е 
тюк SOLA ion 
© Паң уг BEA wes a 
“ТӨ 
1 
| T | = 


@ АСТ E АСУ АСУ 
WAN! FOLO ISOLAT ION 
H 2 H 4 


оғы 
oec 
ET 


Figure 3-14. Panel O7-RCS switches 
Panel O8 


The OMS helium press/vapor isolation switches are in the GPC position so that the 
valves can automatically open at the start of the OMS ASSIST. 


The OMS tank isolation switches are in the GPC position, with the talkbacks OPEN. 
These valves need to be open for OMS burns and abort dumps. 


Both the OMS A and OMS B crossfeed switches are in the GPC position so that they 
can be opened automatically for an interconnect. The talkbacks should indicate that the 
valves are in the CLOSE position. 
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Figure 3-15. Panel O8 OMS switches 
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Panel C3 


The OMS Engine switches are set to the ARM/PRESS position so that the engines are 
ready to fire for the OMS assist. 


m DMS ENG——À 
LEFT RIGHT 


ARM 


ш L^ [n Z0 0 e 2 1r 
ии гт TUNI D 


OFF 
Figure 3-16. Panel C3 OMS ENG 
Panel A14 


The OMS left and right pod heaters are OFF for ascent, which conserves electrical 
power. In this time period, the temperature in the pod should not get very low. The 
OMS crossfeed lines run through the aft fuselage area where there are main propulsion 
system lines carrying cryogenic propellants; thus, the crossfeed lines might be subject 
to very low temperatures. For this reason, both the A and the B crossfeed line heater 
circuits are set to AUTO to provide redundant heating for these lines. 


r RCS/0MS HBATERS 


OMS 


FWD Res [——— LEFT РОО —— — RIGHT POD —34 KIT Г- CRSFD LINES —— 
A AUTO A AUTO B AUTO A AUTO B AUTO A AUTO A AUTO B AUTO 


9 
F 
F 
(S1) (S2) (54) 


(S3) < 66) (STI 158) 


@ 
@ 


B AUTO OFF B AUTO 


OFF 
006500016. PNL, 1 


Figure 3-17. Panel A14 
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Configuration for Orbit 


During normal orbit operations, the switch configuration is designed to provide for safe 
operation with a minimum amount of attention from the crew. 


The rationale for the RCS switch settings will not be covered for the orbit phase, but is 
listed below in the Ascent Checklist post OMS 2 burn reconfiguration. 


P OMS/RCS POST BURN RECONFIG 


O7 AFT L,R RCS 
He PRESS A (two) - GPC (tb-OP) 
B (two) — CL (tb-CL) 
TK ISOL (six) — OP (tb-OP) 
ҮМАМҒ ISOL 1,2,3,4 (eight) — GPC (tb-OP) | 
XFEED (four) — CL (tb-CL) 
O8 FWD RCS 
He PRESS A - GPC (tb-OP) 
- - CL (tb-CL) 
TK ISOL (two) - OP (tb-OP) 
\MANF ISOL 1,2,3,4 (four) — GPC (tb-OP) | 
Ж L,R OMS 
P» He PRESS/VAP ISOL (four)- CL 
ОЕ TK ISOL (four) — OP (tb-OP) 
eo XFEED (four) — CL (tb-CL) 


5-2 ASC/114/FIN A 
Figure 3-18. Ascent Checklist OMS/RCS Post Burn Reconfig 
Panel O8 


All four OMS helium press/vapor isolation switches are in the CLOSE position. This 
protects the helium tanks from any downstream leaks or regulator failures. 


The OMS tank isolation valves are left in the OPEN position with the talkback OPEN. 
This is done so that if some failure occurs that prevents subsequent operation of these 
switches or valves, the valves will be open, which is preferable to having them stuck 
closed. With the tank isolations open, there are now two independent transducers (tank 
pressure and inlet pressure) that can be used to diagnose a potential problem. 


The OMS crossfeed switches are in the CLOSE position with the talkback closed to 
ensure that the OMS and RCS remain isolated. 
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Panel C3 


The OMS engine switches on Panel C3 remain in the OFF position during normal OPS 
2 operations. 


Panel A14 


For normal OPS 2 operation the A circuit heater switches are set to AUTO, and the B 
circuit switches are OFF. This configuration permits thermostatic control of OMS pod 
temperatures. The procedure in the POST Insertion checklist (see Figure 3-19) will set 
the heaters on A14 for orbit operations. 


AFT STATION CONFIG 


POST SEAT EGRESS 
O14:D cb MNA CAB VENT —op 
ISOL -op 
A14 RCS/OMS HTR FWD RCS —A AUTO 
L POD (two) — A AUTO, B OFF 
R POD (two) — А AUTO, B OFF 


OMS CRSFD LINES (two) – A AUTO, B OFF 
VFWD,AFT RCS JET йел) – AUTO 


Figure 3-19. Post Insertion Checklist Heater Reconfig 


Configuration for Entry 


Following the Deorbit burn the OMS and RCS switches are configured for entry. The 
procedure from the Entry Checklist is shown below. 
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OMS/RCS POST BURN RECONFIG 


P O7  AFTLRRCS 
ҮНе PRESS (four) — OP (tb-OP) 


VTK ISOL (si) | —GPC (tb-OP) 
\XFEED (four) — GPC (tb-CL) 
08  LROMS 


He PRESS/VAP ISOL (four) — CL 
VTK ISOL (four) — OP (tb-OP) 


* |f OMS PRPLT FAIL, * 
* ҮА TK ISOL (two) - CL * 


XFEED (four) — CL (tb-CL) 


O3 RCS/OMS PRESS sel - RCS as reqd 
PRPLT QTY sel — RCS as reqd 


POST 
BURN 


3-32 ENT/ALL/GEN G 
Figure 3-20. Entry Checklist OMS/RCS Post Burn Reconfig 


Panel O8 


The OMS switches on Panel O8 are in the same positions as for the orbit phase. The 
pattern one can remember when looking up at Panel O8 is closed, open, closed (OMS 
He Press/Vapor Isolations, Tank Isolation valves, and Crossfeed valves). Again, with 

the tank isolation valves open, we now have transducer redundancy for the propellant 
tanks. 


Panel C3 


The OMS engine switches are taken to the OFF position after the deorbit burn and will 
remain there until post-landing. 
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3.7 CONSTRAINTS AND LIMITATIONS 


The following is a list of the constraints and limitations for the OMS that are relevant to 
crew operations. 


The minimum altitude for an OMS engine burn is 70,000 feet. Below this altitude, the 
pressure difference between the inside and the outside of the OMS engine nozzle could 
cause it to collapse. 


An OMS engine should not be started again once it has burned to propellant depletion. 
Engine damage can result when burning an OMS engine to depletion. 


For the purpose of ascent abort dumps, one OMS tank set can support the 
simultaneous burning of one OMS engine and 14 RCS jets, but it cannot support one 
OMS engine and 24 RCS jets. One OMS tank set can support the firing of 24 RCS jets 
if no OMS engines are burning. 


The minimum nitrogen pressure required for starting an OMS engine is 299 psi for 
normal operation. With low nitrogen pressure, the engine control valve operations will 
be slower, and an abnormal start could result. For contingency operations, an N» tank 
pressure of 254 psi or an № regulator pressure of 288 psi is the minimum acceptable 
pressure for an engine start. 


In normal operations, two OMS tanks should never be connected through the crossfeed 
lines, and an OMS tank should not be connected to an RCS tank. This is because 
different tanks might be at different pressures, and connecting them together could 
result in forcing helium into the propellant lines. When crossfeeding to an OMS engine, 
only one OMS pod should feed at a time; and, when interconnected to the RCS system, 
the RCS tank isolation valves should be closed before the crossfeed valves are opened. 


For an OMS burn with less than 1196 propellant remaining; an RCS settling burn should 
be done to aid OMS propellant acquisition. 


The OMS quantity should be less than 22 percent to remain within the structural limit for 
landing weight. 


No OMS burns should be performed during remote manipulator system (RMS) activity 


because there is a danger of putting excessive torque on the arm or forcing contact 
between the orbiter and a payload. 
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3011/7 7 
OMS BOTH 1 

L 2 

R 3* 
RCS SEL 4 
5 TV ROLL 180 
TRIM LORD 
аты. 
7 LY 95,2 
8 RY -5,2 
9 WT 246200 


__4/10:10:00,0 
TGT PEG 4 

14 C1 15310 
15 C2 

16 HT 

17 ӨТ 

18 PRPLT +10000 
TGT PEG 7 

19 AYX -299,6 
20 AVY 

21 АЧ? 
LOAD 22/TIMER 23 


QUESTIONS 


DEORB MNYR COAST 


BURN ATT 


25 Y 18 

MNVR 27% AUTO 

TTG 01:00 

REI 4146 

TFF 17:30 
GMBL 


PRI 28% 29% 
9 3 
gro S 


GMBL CK 34 


Use the example Maneuver display Figure 3-21 to answer questions 1-5. 


1 004/10:00:37 
000/00:09:24 


AVTOT 415,8 
TGO 8:40 


VGO X +403,15 
Y -95,H 
2 -46,14 


HA HP 
TGT 164 +15 
CUR 160 +160 


35 ABORT TGT 0 


FWD RCS 
ARM 36 
DUMP 37 
OFF 38% 
SURF DRIVE 


OFF 40% 


Figure 3-21. Example DEORB MNVR COAST display 


1. Which OMS engine will be used for the deorbit burn? 


deorbit burn? 


At what MET will the OMS burn start and end? 
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What is the approximate range (in percent) of the ungaugable region? 
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Will the right engine pitch actuator be driven by the primary or secondary motor? 


What is the current perigee altitude, and by how much will it be changed by the 


Is this display indicating the correct configuration for starting a deorbit burn? 


Why is it preferable to be in free drift when setting up an OMS-to-RCS interconnect? 
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4.0 SYSTEM MALFUNCTIONS 


A few select system malfunctions will be discussed in this section. Selected displays 
and the corresponding procedures have been chosen to reinforce the concept of the 
system failure. The purpose is not to provide a step-by-step rational, but to develop a 
general understanding of the overall objective of the procedure. The following system 
failures will be covered: 


4.1 Caution and Warning 


4.2 Leak Categories 


4.3 Transducer Failure 
4.4 Helium Regulator Failures 
4.5 Propellant Leaks and Helium Leaks 


4.6 Nitrogen Leaks 

4.7 Gimbal Failures 

4.8 PASS OMS Engine FDI 

4.9 OMS Engine Fail and Propellant Fail 
4.10 Thermal 


4.11 Electrical 


4.1 SUMMARY OF THE OMS CAUTION AND WARNING SYSTEM 


When there is a problem in the OMS system, as with other systems, the crew receives a 
caution and warning (C/W) alert (see Table 4-1). There are class 2 and class 3 alerts 
for the OMS system. Class 2 alerts can occur in all OPS and generate a master alarm 
light and tone and a light on the C/W matrix on Panel F7. A class 3 alert is generated 
by the primary GNC or SM software in OPS 2 and 8 or by the BFS software in other 
OPS. Class 3 alerts include an SM alert light and tone and a fault message. 


The C/W matrix has four OMS lights: LEFT OMS, RIGHT OMS, OMS KIT, and OMS 
TVC. Each of these lights responds to one or more C/W input channels. A parameter 
out of limits causes the C/W light to be illuminated. The following table lists the C/W 
lights, the channel parameters, and the conditions that cause alerts. 
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Table 4-1. OMS C/W 


CIW 
matrix light 


Channels 


Conditions 


LEFT OMS 


Left OMS oxidizer tank pressure 


Left OMS fuel tank pressure 


Left OMS engine 


If pressure less than 232 or greater than 
284 psi 

If pressure less than 232 or greater than 
288 psi 


If Pc less than 80% when burning an 
OMS engine OR ЁР, greater than 80% 
prior to OMS ignition 


RIGHT OMS 


Right OMS oxidizer tank pressure 
Right OMS fuel tank pressure 


Right OMS engine 


If pressure less than 232 or greater than 
284 psi 

If pressure less than 232 or greater than 
288 psi 


If Pc less than 80% when burning an 
OMS engine OR ЁР, greater than 80% 
prior to OMS ignition 


OMS TVC 


OMS thrust vector control system 


If L/R OMS Gimbal failure 


ET 


© 


0; PRESS Ho PRESS 


FUEL CELL 
RHAC 


FUEL CALL} FUAL CELL 
STACK TEMP PUMP 


05 HBATBR 
CABIN ATM 2 ТЕМР 


MAIN BUS 
UND BRVOLT 


AC AC 
VOLTAGE OVERLOAD 


FRBON AV BAY/ 
LOOP. CABIN AIR 


IMU 


FWD RCS RCS JET 


H50 LOOP RGA/ ACCEL AIR DATA 


RIGHT/ AFT 
LOFT RHC ЕНІ 


RIGHT RCS 


LEFT RCS 


RIGHT OMS 


LBFT OMS 


PAYLOAD 
WARNING үре 


CAUTION 


FCS 
SATURAT | ON 


PAYLOAD FCS 
PRIMARY C/W) CHANNEL 


OMS KIT OMS TVC 


APU 
TEMP 


BACKUP C/W 
ALARM 


Ф 


APU 


OVERSPBBD | UNDERSPBRD 


HYD PR8SS 


© 


703400219. ARTs 3 


Figure 4-1. C&W Matrix Forward panel 


The following table lists all the fault messages that can occur for the left or right OMS 
and the PASS or BFS OPS in which these messages can occur. 
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Table 4-2. OMS GNC fault messages 
OPS 
ко cause 
g Primary BFS 

L(R) OMS GMBL 1,2,3 1,3 2° delta between OMS gimbal command 
and position actuator feedback for a 
period longer than 3.8 seconds 

L(R) OMS PC 1,2,3,6 1,3,6 OMS engine P, less than 80 percent when 
burning an OMS engine or if Ре greater 
than 8096 prior to OMS ignition 

L(R) OMS QTY 1,2,3,6,8 ES OMS propellant tank quantity less than 5 
percent 

L(R) OMS TK P 2,8 1,3 OMS oxidizer or fuel tank pressures below 
234 or above 284 psi (288 psi for BFS) 

2,8 1,3,6 OMS helium tank pressure below 1500 psi, 

or OMS N; tank pressure below 1200 
psi, or OMS N; regulator pressure above 
434 or below 299 psi 

L(R) OMS VLV 2 = OMS helium press/vapor isolation valves 
not open during an OMS burn 

L(R) OMS TEMP 1,3 OMS engine fuel injector temperature 
above 260? F 

G23 OMS RCS QTY 2 More than 77 percent (10000 Ibs) of left or 
right OMS propellant used during an 
OMS interconnect 
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Table 4-3. OMS SM fault messages 


OPS 
onse CAUSE 
9 Primary BFS 
S89 PRPLT THERM 2 = Temperature high ог low at one of 11 
OMS temperature data points in the OMS 
pods 
Temperature limits vary for different points 
but are approximately 50? F for the low 
limit and 100° F for the high limit 
S89 PRPLT THERM 2 Same as above for 32 different data points 
POD 
SMO THRM PRPLT = 0,1,3 Same as above for 20 selected data points 
S89 L (R) OMS 2 = OMS engine fuel injector temperature 
TEMP above 260° F or below 36° F 
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4.2 LEAKS AND OTHER PROPELLANT SYSTEM FAILURES 


pung P 


Helium tank 
leak 


Helium line 
leak 


Propellant 
tank leak 


Inlet line leak 


Crossfeed 
line leak 


usa006500_005r1.cvx 


Figure 4-2. OMS leak schematic 
Leak Isolation 


Leaks in the propellant system could occur anywhere in the various tanks and lines (see 
Figure 4-2). For the purpose of crew procedures, however, all of the leaks can be put 
into a few categories. 


1. Helium tank leak, including the line between the tank and helium press/vapor 
isolation valves 


2. Helium line leak between helium press/vapor isolation valves and the check valves 


3. Propellant tank leak (fuel or oxidizer), including the lines between the check valves 
and the tank isolation valves 


4. Propellant line leak between the tank isolation valves and the propellant valve 
assembly 


5. Crossfeed line leak 
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4.3 OMS TRANSDUCER FAILURES 


When caution and warning annunciates an OMS TANK P message three initial critical 
tasks must be performed. Identify which system is affected, locate the appropriate 
procedure and cross check the initial indication. All this must be done in a timely 
manner. Figure 4-3 shows the indication of a Right OMS fuel tank pressure that is 
biased low. The caution and warning light along with the message points to the 
appropriate side, but one must determine which system has the problem (oxidizer, fuel, 
helium or nitrogen) and how that system has been affected (pressure high or low). This 
is done only by matching the up or down arrow on the GNC SYS SUMM 2. Figure 4-3 
shows a down arrow displayed next to the right OMS fuel tank pressure of 199. 


1031/7  /0198 СМС SYS SUMM 2 5 000/00304356 
BFS 000/00:00:00 

OMS AFT QTY L R OMS L R 
OXID 30.1 30,1 TK P HE 4150 4180 

FU 30,1 30,1 OXID 254 251 
FU INIT Ж. 251 FU 254 1991 


"rc N2 ТК P 2320 2310 
OXID FU ҒАШ VL REG P 327 330 


5568 [5536 P VV ОР 
254 | 252 in ғ 
32) 33 OXID 259 
256 | 248 FU 254 
Му 1 
ISOL 
VLV 


5592 |8600 
P| 270 | 266 
QTY| 100 | 100 


R OMS TK P * 5 00:04:27 
SYS SUMM 


Figure 4-3. GNC SYS SUMM 2 R OMS Fuel Tank P bias low 
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Next, one must locate the appropriate procedure. One can see that the shuttle is in 
second stage, MM 103 (MET 4:56) and the OMS Engines are not burning (Ball Valves 
closed 0%). Compiling all this information is not easy, because the interpretation of the 
problem is not obvious and the title on the procedure can be cumbersome. Once the 
proper procedure is located, in our case, OMS TANK P LOW (OX or Fuel) NOT 
DUMPING, the crosscheck must be performed prior to taking any action (Figure 4-4). 
Do not omit this step. For our example the engine inlet P is the redundant transducer 
and one can see that is does not agree with the right fuel tank pressure, therefore the 
procedure is not entered because there is no confirming cue. Therefore, the ROMS 
fuel tank transducer has failed, no action. 


OMS TK P LOW (J, OX or FU) NOT DUMPING (VENG IN P) 


Figure 4-4. OMS TK P LOW AESP 


Working the incorrect procedure can have bad consequences, therefore patience; good 
operational knowledge and situational awareness are required. This systematic 
approach, to identify, find the procedure and cross check, prior to throwing a single 
switch is good methodology, and can be applied to working any procedure. 
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4.4 HELIUM REGULATOR FAILURES 


As stated earlier the OMS Helium system is used to pressurize both the oxidizer and 
fuel tanks. The parallel A and B paths both have dual regulators in series (Figure 4-5). 
If a set of these two regulators fail open, the helium will over press both the oxidizer and 
fuel tanks. Figure 4-6 is an example of the right OMS He A leg regs failed open. The 
oxidizer and fuel on the right OMS are at 299 and 297 psi respectively. One can see 
that the left and right engines are burning in OPS 302. This failure has happened 
during the deorbit burn and the procedure would be found on the D/O Burn Monitor card 
(Figure 4-7). The cross check prior to taking any action would be to see if the 
corresponding engine inlet pressure is also high. Both oxidizer inlet pressure (238) and 
fuel inlet pressure (265) confirm that the A or B set of regulators has failed open. The 
procedure directs you to close both the A & B He/Press vapor isolation valves in order 
to maintain tank pressures between 234 and 284 psi. With both of these valves closed, 
the pressure in the tanks will return to nominal. If the failure can be isolated to the A or 
B leg then the failed open leg is closed and the healthy leg is opened, thus regulating 
the flow of helium. At this point the procedure is complete and the crew can return to 
the normal deorbit burn monitoring. 


Helium tank 


Pressure sensors Pi ]P 


Vapor 
isolation 
valves 


Y 
Ж 257 psig 
E 264 psig 


4 Check valves Y 


Relief valves* 


P Tank pressure sensor |Р 


Propellant tanks 


*Relief valves: Burst disk opens at 308 
psig; subsequently, the valve opens at 
300 psig and reseats at 280 psig 


и5а006500 007.cnv 


Figure 4-5. OMS HE System 
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3021/  /018 GNC SYS SUMM 2 5 004710301324 
BFS 000/00:00:00 

OMS AFT QTY L R OMS L R 
OXID 30,1 30,1 TK P HE 2930 2350 
FU 30,1 30,1 OXID 253 2997 
FU INJ T 227 232 FU 253 2971 


P N2 ТК P 2180 2170 
OXID FU ҒАШ VL REG P 328 331 


024 1832 OP ОР 
Р 244 | 248 
20| 21 202 238 
P| 246 | 244 222 265 
P| 244 | 248 100 100 
Р 246 | 246 100 
P| 244 | 248 arr JE 
OXID FU ЕНІ 


R OMS TK P * 5 10:01:13 
SYS SUMH 


Figure 4-6. GNC SYS Summ 2 


OX & FU HIGH He PRESS/VAP ISOL (two) - CL 
Cycle He A(B) to maintain TK P 234-284 


Figure 4-7. DEORBIT Burn Monitor card 


4.5 OMS PROPELLANT LEAKS & HELIUM LEAKS 


In this section we will discuss OMS Propellant and Helium leaks on orbit. The 
signatures and procedures will be discussed briefly. Both procedures will end up using 
the same burn card in OPS 2. The objective of the propellant leak is to burn the 
propellant rather than have it leak into the OMS pod, while the objective of the helium 
leak is to maximize the existing delta velocity capability. 


Propellant Leaks 


The signature for a propellant leak on orbit is shown in Figure 4-8. The corresponding 
procedure in the Orbit Pocket is shown in Figure 4-9. One can see that the redundant 
transducer check confirms that there is a leak on the Right OMS oxidizer. The 
procedure mentioned in step 30 will take care of targeting and set up a propellant path 
to the engine. MCC will provide out of plane or retrograde targets. The retrograde burn 
lowers the perigee altitude and reduces the AV requirement for the subsequent deorbit 
burn. 
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000702:02:06 
000/00:00:00 
RFT QTY Е R OMS L 
OXID 30,1 30,1 TKP HE 3790 
FU 30,1 30,1 OXID 251 
FU 251 


а "а= 
OXID FU FAIL VL 


5424 |5368 
F| 245 | 245 
86| 85 


F| 246 | 244 
F| 244 | 248 
P 246 | 246 


Figure 4-8. OPS 2 Right OMS Oxidizer tank leak 


OMS TK P (FU or OX) LOW 


1. Check with corresp ENG IN P 
If ENG IN P disagrees: 
2. Go to MAL, OMS, 11.1a, L(R) OMS TK P >> 


If aff OMS not feeding OMS/RCS ІСМСТ: 
29. Perform OMS SECURE, then: 
30. If OMS PRPLT TK P decr: 
Go to LEAKING OMS PRPLT/He BURN >> 
31. If either OMS IN P decr >> 
If leak not found: 
32. Goto MAL, OMS, 11.1a, L(R) OMS TK P 


Figure 4-9. Orbit Pocket Checklist OMS TK P Low Procedures 
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The burn card will provide the start and shutdown cues required to deplete the leaking 
propellant tank (see Figure 4-10). A settling burn using the aft RCS jets is required 

15 seconds prior to TIG. This will push the remaining OMS propellant to the back of the 
tank, in an effort to avoid helium ingestion. The shutdown cues are Pc« 80% or an Hp 
of 95. If a retrograde burn was performed and Pc did not drop below 80%, then one 
needs to retarget out-of-plane and burn to depletion. This is a time critical procedure as 
noted with the quick TIG, MET +10 minutes. It is important to note, one does not want 
to burn below current Hp of 95. The subsequent Deorbit burn will be performed on the 
remaining single engine. 


TIG i 
O PB" current МЕТ + 10 min 


Shut down cues 
for a Prop Leak 
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TARGET DATA | EAKING OMS PRPLT/ BURN DATA 
OMS L 2 He BURN BURN ATT 
Eos Sae Prop Leak 
5 TV ROLL 25 P 
TRIM LOAD 


6 P 


TGTPEG7 QUT OF PLANE 


d fttt = ПЕП 
aava: OES oei 


NTGT HP < 95 
ҮММ2027 VCNTLR PWR (two) - ON VATT 
(302)" VADI — REF/HI DAP — AUTO" 
VENG SEL (LVLH/HI) (AUTO/ 
DISC)" 


If retrograde burn: Enter TGO - 10 sec 
TIG-2 Selected OMS ENG - ARM/PRESS 


WARNING 
Do not burn if: OMS He TK P < 640 


FU ENG IN P « 216 
OX ENG IN P « 151 
Payload/RMS not berthed ar stowed 


2:15 EXEC, and if PRPLT LEAK, THC + X 
:00 TIG" (VPc, AVTOT, ENG VLV) e . 
+:01 Release THC RCS Settling 

If PRPLT LEAK, when CUR HP = 95 or Pc < 80: Burn 

OMS ENG - OFF; secure aff OMS 
If He LEAK, when CUR HP = 95 or OMS He TK P 
< 640 or OMS QTY « 39 OMS ENG - OFF 

If гедс, repeat proc to burn OUT-OF-PLANE 
* On MCC call 
* If PER ADJ TIG < 4 orbits from Deorb TIG, FRCS 
* QTY > 6%, and AVTOT > 10 fps at OMS fail, mnvr to 
* -X ATT (pitch up at 3°/sec to VGOz = 1/4 AVTOT): 
* THC -X to CUR HP = 95 or FRCS PRPLT deplete 
CUTOFF” 
+:02 OMS ENG - OFF™ (If « 3 IMU, at F]: Цр 


OPCL-1a/O/F 


+ ME EE EJ 


USA006500_068.cvx 


Figure 4-10. OMS Leaking PROP burn card 
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He LEAK 


When an OMS helium tank fails, the OMS pod can still be used, but the only 
pressurization available is the initial pressure in the propellant tanks (ullage pressure), 
which drops gradually while a burn progresses. When an OMS system has only the 
ullage pressure in the tank it is considered to be in blowdown. The amount of AV 
capability for an OMS tank in blowdown depends on how much propellant is in the tank 
and how much helium is in the tank (see Figure 4-11). If the tank contains a large 
amount of propellant, it will have room for only a small amount of helium; consequently, 
the pressure in the tank will drop quickly during a burn and only a small amount of the 
propellant can be used. If the tank contains a small amount of propellant, there is room 
for a large amount of helium. In this case there will be sufficient helium pressure to 
support a long burn, but the propellant will be depleted quickly. 


There is an optimum balance between propellant and helium in the tank that results in 
the maximum AV capability for a blowdown burn. This is called the “max blowdown" 
quantity and occurs at a propellant quantity level of approximately 39 percent. 


Not enough helium Not enough propellant Maximum blowdown 
Small helium volume | Optimum helium volume 
Large helium volume 
Full propellant quantity | Approximately 40% 
Small propellant quantity propellant quantity 


Small AV capability, because the Small AV capability, because the Relatively large AV capability, 


small helium volume cannot propellant quantity is low because the helium volume will 
support a long burn and most support the burning of all of 
of the propellant cannot be used the propellant 


usa006500 006r1.cnv 


Figure 4-11. OMS blowdown burn situations 
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20117 /018 GNC SYS SUMM 2 1 000/02:04:01 
000700200200 

OMS RFT QTY L R OMS L R 
OXID 30,1 30,1 TK P HE 13701 4000 

FU 30,1 30.1 OXID 251 250 

FU 251 248 


Fas N2 TK P 2310 2300 
OXID FU FAIL] VL REG P 373 376 
15424 |5368 P Му OP OP 
P 245 | 245 ENG IN P 

86 | 85 OXID 244 250 
P| 246 | 244 FU 248 250 


2 F| 244 | 248 Му 1 0 
P| 246 | 246 0 0 


2 
P| 244 | 248 m JE 
OXID FU FAI 


5432 [3408 P5432 |8408 
245 | 245 P 245 | 245 
91 | 90 91 | 90 


L ONS TK P 
SYS SUMM 


Figure 4-12. Left OMS He tank leak OPS 2 


Figures 4-12 to 4-14 display the signatures and procedures required to complete an 
on-orbit OMS burn to max blowdown. Again, the objective is to get this leaking tank in 
the best possible state (39%), before the helium tank is considered failed at a pressure 
of 640 psi. Note that this is also a shutdown requirement on the LEAKING OMS 
PRPLT/He Burn card (see Figure 4-14). 


OMS He TK P LOW GNC SYS SUMM 2 


1. wHe TK P < 1500 or decr abnormal ([OMS/MPS] and SPEC) 
If and SPEC disagree (inst prob): 

2. | Goto MAL, OMS, 11.1a, ЦВК) OMS TK P >> 
3. VOMS He PRESS/VAP ISOL (two) – CL 
If He TK P still decr: 

4. (Aff) OMS He PRESS/VAP ISOL (two) - OP 

5. If not at max blowdown (QTY > 39%): 

Go to LEAKING OMS PRPLT/He BURN >> 

6. If l'enct: Perform l'ENCT RETURN (RCS)(8-4), then: 
If OMS TK P FU/OX decr: 

T. Go to OMS TK P (FU or OX) LOW >> 
If neither decr (He leg leak): 

8. ҮМСС for OMS Burn deltas 


Figure 4-13. OMS He Tank P Low Procedures 
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He Leak 


Shut down cu 
for a He Leak 
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TARGET DATA LEAKING OMS PRPLT/ BURN DATA 
He BURN BURN ATT 


24 К 


* Current MET + 10 min 
TGTPEG7 QUT OF PLANE 


у НА НР 
ем Б = ПЕП 
ПГ | БГ Le) 
YTGT HP <95 


YMM202" — NCNTLR PWR (two) - ОМ VATT 
(3027 VADI - REF/HI УРАР — AUTO” 
YENG SEL (LVLH/HI) (AUTO/ 
DISC)" 


If retrograde burn: Enter TGO - 10 sec 
TIG-2 Selected OMS ENG - ARM/PRESS 


WARNING 
Do not burn if: OMS He TK P < 640 
FU ENG IN P « 216 


OX ENG IN P « 151 
Payload/RMS not berthed or stowed 


215 EXEC, and if PRPLT LEAK, THC + X 
:00 TIG" (УРс, AVTOT, ENG VLV) 
+:01 Release THC 
If PRPLT LEAK, when CUR HP = 95 or Pc < 80: 
OMS ENG - OFF; secure aff OMS 


A If He LEAK, when CUR HP = 95 or OMS He TK P 
ей < 640 or OMS QTY « 39 OMS ENG - OFF 


If reqd, repeat proc to burn OUT-OF-PLANE 
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Figure 4-14. Leaking OMS HE Burn Card 
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4.6 NITROGEN SYSTEM FAILURES 


We will discuss only two specific nitrogen system failures. The N» failure procedures 
are designed to preserve the engine start capability by maintaining regulator pressure 
and to sacrifice the engine purge function when necessary since it is not critical. 
Remember that taking the OMS engine switch to ARM or OFF closes the Nz press valve 
and isolates the М» tank. 


N2 System Leak 


The GNC SYS SUMM 2 display below (Figure 4-15) is an example of a Left OMS N2 
system leak during an OMS-2 burn. The associated procedure is on the OMS-2 Burn 
Monitor card. Again, the cross-check is on the procedure (Figure 4-16). Assume the М; 
tank pressure on OMS/MPS MEDS display is reading 1140 and dropping. This 
confirms that the М» system does have a leak. When the OMS engine switch is in 
Arm/Press, we essentially have an open system. The high pressure tank and 
accumulator, separated only by the regulator and check valve. At this point the leak 
could be anywhere in the М» system (see Figure 4-17). If the leak is in the tank, taking 
the OMS Engine to ARM at 470 psi would prevent the purge from occurring and save 
the remaining pressure in the accumulator for the deorbit burn. If the leak is in the 
accumulator, the № pressure will continue to drop after the OMS Engine switch is 
placed in ARM. With a leak in the accumulator and the P valve closed there will be 
insufficient pressure to keep the ball valves open and the engine will eventually fail. 
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Figure 4-15. L OMS М; Tank P Low 


OMS N2 TK P LOW 
("[ous/ves]) 
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Figure 4-16. Procedure on the OMS-2 Burn Monitor 
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Nitrogen tank 


ІР! Pressure sensors 


X М№,ргеѕѕ valve 


: Pressure regulator 
325 psig | 4 NEUE 


Relief valve opens 
at 450 psig, reseats 
at 400 psig 


Check valve 


REG Pressure sensors 


Engine control valves 


To purge valves 
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Figure 4-17. М» System 


N2 Regulator Pressure High 


Figure 4-18 is an example of the Right OMS М; regulator pressure high during an 
OMS 2 burn. The overpressed accumulator is confirmed by seeing a decrease in the 
№ tank pressure. In our example the regulator has failed open and the Nz is relieving 
overboard (see Figure 4-17). Once the relief valve is open the nitrogen can deplete 
rapidly. Placing the OMS ENG switch in ARM will prevent the tank from depleting. 
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Figure 4-18. № Reg P High during MM105 OMS-2 


OMS N2 REG P HIGH or LOW | OMS ENG - ARM 


Figure 4-19. OMS М; REG P HIGH OMS Burn Monitor 
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4.7 GIMBAL FAILURES 


The OMS gimbal actuators have fault detection and identification (FDI) software. The 
FDI software monitors the commands and the feedback for the actuators. If, an 
actuator is commanded to move continuously in the same direction and the actual 
deflection does not match the command, a gimbal failure is annunciated. There will be 
a gimbal failure fault message and a down arrow on the Maneuver display next to the 
position indicator for the failed actuator (see Figure 4-20). The FDI software can detect 
a failure in an individual pitch or yaw actuator. 


30217 7 DEORB MNYR EXEC 1 004/10:01:08 
OMS BOTH 1* 000/00:01:07 
L2 BURN ATT 
R3 24 R 65 AVTOT 358,6 
RCS SEL 4 25 P 40 TGO 3:43 
5 TV ROLL 180 26 Y 50 
TRIM LORD MNVR 27KAUTO | VGO X +339,15 
BP +0,0 TTG Y +21,45 
? LY 5.7 REI 4155 Z 3114,42 
8 RY +5,7 TFF 21:52 
9 WT 244778 GMBL HA HP 
L R TGT 151 +20 
- 4/10:00:00,0| P «40.0 40.0 | CUR 160 +140 
TGT PEG 4 Ү-5,7 -7,01 
14 С1 15910 
15 С2 -,6229| PRI 28% 29% 35 ABORT TGT 0 
16 HT — 85,800| SEC 30 31 
17 eT 113,674) OFF 32 33 FWD RCS 
18 PRPLT +8579 ARH — 36 mius 
TGT PEG 7 GMBL CK 34 DUMP 37 primary yaw 
19 AVX -233,8 gimabl failure 
20 AVY -262,2 
21 ANZ 372,1 
LOAD 22/TIMER 23 
R OMS GMBL ж 1234 10:01:00 
EXEC 
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Figure 4-20. DEORB MNVR EXEC with R Gimbal fail 


Gimbal failures can occur during a burn or a gimbal check. When the primary system 
fails, the secondary system is selected with an item entry (Figure 4-21). Even though 
the failure may be only in the primary pitch actuator, the secondary is selected for both 
pitch and yaw since there is no way to split up that selection. Any change to the gimbal 
selection will reset the FDI logic and remove any down arrows. 


L(R) OMS GMBL — SEC (twice) 


If high RCS usage: OMS ENG FAIL 


OMS GMBL PRI fail _ 
SEC fail 


Figure 4-21. OMS gimbal fail procedure DEORBIT Burn Monitor 
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If the secondary system fails during a burn, there is no action unless there are obvious 
control problems or an excessive amount of RCS propellant is being used to maintain 
control, in which case the engine is considered failed and the OMS engine switch is 
taken OFF (Figure 4-21). High RCS usage is defined as 10% total (L+R) RCS 
propellant used in 30 seconds. In most cases the gimbal actuators are not moving very 
much during a burn. Even with a failure, the actuators should hold the engine in its last 
commanded position, and control problems are unlikely. If it were known in advance 
from a gimbal check that the primary and secondary systems have failed, the engine 
would not be started. 


4.8 PASS OMS ENGINE FDI 


PASS contains fault detection and identification (FDI) software that monitors the OMS 
engines and alerts the crew when there is a problem. 


The FDI software checks four items: 


1. The status of the two FA MDMs that transmit OMS engine P; measurements (FA3 
for left and FA4 for right) 


2. OMS engine Pc measurements 


3. The acceleration (or AV) being experienced (except during ascent dumps when the 
main engines are burning and the OMS AV contribution is too small to measure). 
This AV check is used to verify that the thrust from an OMS engine has been lost. 


4. OMS engine switch positions 
Missing Pc Data 


If there is a failure of FA3 or FA4, the associated Pc measurement is lost and the FDI 
software will not be able to annunciate any failures for the affected engine even if the 
engine does fail. 


Low Pc 


If an OMS Pc measurement drops below 80 percent, an OMS Pc fault message will 
appear on display and an OMS light (LEFT OMS or RIGHT OMS) on the C/W matrix on 
Panel F7 will be illuminated. These indications can also result from the failure of a Pc 
sensor. There is only one Pc sensor per engine. 


Low Pc and AV Loss 


If the measured Pc is below 80 percent and there is a decrease in vehicle acceleration 
indicating a loss of thrust, a down arrow will appear on the Maneuver display next to the 
engine with low Pc. 
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Engine Shutdown Flag 


If the Pc flag is set, Р. less than 80% when burning or Р, greater than 80% prior to OMS 
ignition, and the AV check indicates a loss of thrust, and the OMS engine switch is in 
the OFF position, then the engine shutdown flag is set for Guidance (see Figure 4-22). 
Guidance will not reconfigure for the loss of an OMS engine until the OMS Engine 
switch on Panel C3 is taken to OFF. Once the thrust from one OMS engine is lost, the 
AV check is automatically reset to detect a subsequent loss of thrust so that a second 
engine failure can be identified. The BFS does not check AV and only uses Pc for 
engine failure detection. 


OMS engine FDI 


Conditions Results 


OMS engine switch 
in OFF position 


Engine shut down 
flag setin GPCs 


Down arrow by engine 
on MNVR display 


MDM Р, « 80% 
Left FA3 


Right FA4 Р, FAIL message and 


OMS C/W light 


| No missing Pc data 


usa006500 004.cnv 
Figure 4-22. OMS engine failure detection 


Figure 4-23 is an example a Left OMS Engine that has experienced all of three 
conditions mentioned above. Pc less than 80%, loss of acceleration and Left OMS 
Engine switch on C3 taken to OFF. 
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Figure 4-23. Maneuver display with Left OMS Engine Failure 


4.9 ENGINE FAIL AND PROPELLANT FAIL 


Previous procedures have made reference to OMS engine and propellant failures. An 
operational interpretation of the Flight Rule is shown below. 


OMS Engine Failure: As the name implies, the OMS engine is considered unsafe to 
operate. However, the propellant on that side can still be used. (The OMS Engine 
switch is taken OFF.) 


OMS Propellant Failure: Neither the propellant nor the engine can be used. (The OMS 
Engine is taken to OFF and the system is secured.) 


There is no caution and warning attached to the OMS oxidizer and fuel engine inlet 
pressures. These pressures are used to diagnose engine performance. Making a 
propellant fail/engine fail call real time can be difficult. One needs to make sure they 
have all the confirming cues prior to taking an OMS engine OFF. In the next three 
sections we will provide the all required signatures needed to diagnose ball valve 
failures, oxidizer blockages and fuel blockages. 
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Ball Valve Failure 


The first example we will discuss is a ball valve failure during and OMS-2 burn. One 
can see that in Figure 4-25 that the right OMS ball valve number one is reading zero. 
Lack of adequate propellant flow to the engine would cause the Pc to drop below 80 %. 
This would set the Pc fail flag on the Right OMS. The subsequent loss of acceleration 
would generate the down arrow on the MNVR Exec display. These two cues are listed 
on the burn monitor card as OMS Pc and OMS down arrow (Figure 4-24). Coupled with 
engine valve £1 being less than 7096 on SYS SUMM 2, one has the three cues required 
to call the right OMS Engine as an engine failure. The Right OMS is taken to OFF. 


OMS РС“ & OMS | (BFS: V accel) 
ENG VLV 1or2 « 70 
or OXINP > 227 


OXINP < 227 OMS PRPLT FAIL 
or No OX INP 


OMS ENG FAIL 


Figure 4-24. OMS Pc block Burn Monitor Card 
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Figure 4-25. OMS schematic & SYS SUMM 2 - R OMS Engine Failure 
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Oxidizer Blockage 


The first type of blockage we will discuss is a restriction in the oxidizer line. If the 
oxidizer is prevented from reaching the combustion chamber, the fuel rich mixture ratio 
results in a cooler, less efficient burn, which could violate the Pc low limit and reduce 
thrust. It is important to note that the location of the blockage will determine an engine 
failure or a propellant failure. 


Figure 4-27 is an example of an engine failure caused by an oxidizer restriction. The 
first two cues are OMS Pc low and the right OMS down arrow on the MNVR EXEC 
display. The oxidizer inlet pressure on the right is greater than the 227 psi requirement. 
This rise in the oxidizer inlet pressure indicates the blockage is down stream of the 
transducer, therefore an engine fail. The propellant is still accessible to the left OMS 
engine and RCS jets through the crossfeed line. 


OMS РС“ & OMS J (BFS: V accel) 


ENG ММ 1ог2 < 70 OMS ENG FAIL 
or OXINP > 227 
OXINP x 227 OMS PRPLT FAIL 


or No OX INP 


Figure 4-26. OMS PC block on the Burn Monitor Card 


Figure 4-28 is an example of a propellant failure caused by an oxidizer blockage. 
Again, we will get an OMS PC message and a down arrow on MNVR EXEC display, 
only this time the oxidizer inlet pressure is lower than the 227 requirement. The 
restriction in this case is upstream of the transducer (and assumed upstream of the 
crossfeed line), so a propellant failure has occurred. 


Two useful tips that might be helpful when calling engine or propellant failures. 
Remember H.E.L.P. when monitoring the inlet pressures. H-High pressure, E-Engine 
failure, L -Low pressure, P-Propellant failure. ІТ one sees the inlet pressure go high 
from the nominal steady state condition, chances are it is an engine failure. If the inlet 
pressure goes low then it is likely a propellant failure. Monitoring two OMS engines and 
four inlet pressures can be hard. When presented with an OMS Pc message, narrow 
your focus on the oxidizer inlet pressure, chances are the restriction is in the oxidizer 
line. (OMS Pc message, think oxidizer.) 
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Figure 4-27. OMS schematic & SYS SUMM 2 - R OMS Engine Failure 
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Figure 4-28. OMS schematic & SYS SUMM 2 - L OMS Propellant Failure 
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Fuel Blockage 


The second type of blockage is a restriction in the fuel line. Fuel flow through the 
cooling jacket may be reduced by a fuel restriction. Without proper cooling the engine 
will burn hotter. In addition, the oxidizer rich mixture ratio will cause higher combustion 
temperatures. As with the oxidizer blockage, location will determine an engine failure or 
propellant failure. 


Figure 4-30 Example #1 shows an engine fail caused by a fuel restriction. The first cue 
is the higher fuel injector temperature on GNC SYS SUMM 2. Notice the up arrow and 
Left OMS TEMP message. The fuel inlet pressure of 238 psi is higher than the 
requirement listed on the burn monitor card. This rise in the inlet pressure indicates a 
blockage downstream of the fuel inlet transducer, therefore an engine fail. The 
propellant is still accessible through the crossfeed line. 


OMS TEMP* L 
FUINP 2 OMS ENG FAIL 
< OMS PRPLT FAIL 
or No FU INP 


Figure 4-29. OMS TEMP block on the Burn Monitor Card 


Figure 4-30 Example # 2 is a propellant fail caused by a fuel restriction. Notice the 
same cues as Example #1. (OMS Temp message and the up arrow next to the fuel 
injector temperature) The fuel inlet pressure of 187 psi is lower that the 209 psi listed 
on the card. The restriction in this case is upstream of the transducer (and assumed 
upstream of the crossfeed line), so a propellant failure has occurred. 


Again, remember H.E.L.P. when monitoring the inlet pressures. (H-High pressure, 
E-Engine failure, L -Low pressure, P-Propellant failure.) When presented with an OMS 
TEMP message narrow your focus to the fuel inlet pressures, chances are you have a 
fuel blockage that caused the temperature increase. 
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Figure 4-30. L OMS Engine Fail (Example 1) & L OMS Propellant Fail (Example 2) 
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4.10 THERMAL CONTROL SYSTEM FAILURES 


One of the following fault messages will appear when a temperature in the OMS pods is 
detected to be out of limits: S89 PRPLT THERM OMS or S89 PRPLT THERM POD 
(generated by the primary system in OPS 2) or SMO PRPLT THERM (generated by the 
BFS). These messages usually mean that a heater, thermostat, or temperature sensor 
has failed. On ascent, there are no crew actions, because the heater switches cannot 
be reached easily and a rapid response should not be necessary anyway. On orbit the 
Malfunction Procedures book covers the procedures, which are usually limited to 
switching to an alternate heater circuit with a switch on Panel A14. (See Figure 4-31.) 
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Figure 4-31. OMS MALFUNCTION Procedures Section 11 
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4.11 ELECTRICAL AND DATA PATH FAILURES 


The operation of the OMS is dependent on electrical power supplied through various 
electrical buses and on components of the DPS, including GPCs and MDMs. Failures 
in these other systems can have significant effects on the OMS. This section will 
describe the basic arrangement of power and data transmission and the effects of 
electrical and DPS failures on the following components: 


Helium press/vapor isolation valves and switches 
Tank isolation and crossfeed valves and switches 
ORCS PGSC application 

Pressure and temperature sensors 

Quantity gauging 

Engine control valves and engine ignition 

Thrust vector control 

Pod heaters 

Helium Press/Vapor Isolation Valves and Switches 


There are two types of valves in the OMS propellant system: a solenoid type, like the 
helium press/vapor isolation valves (see Figure 4-32), and a motor driven type, like the 
tank isolation and crossfeed valves. The solenoid type will be discussed first. 


For the solenoid-type valve, the switch has a single set of contacts that allows control 
bus power to activate main bus power for the valve by two possible paths: a manual 
open and close path or a GPC command path. If manual OPEN is selected with the 
switch, main bus power energizes a solenoid that opens the valve. When power is 
removed, the valve is closed by spring pressure. When the switch is in the GPC 
position, an open command can come through a specific FA MDM to open the valve 
using power from a different main bus. There is no GPC close command. The valve 
closes when the open command is no longer received or when the switch is taken to the 
manual CLOSE position. 


Manual control of the valve can be lost if the control bus power to the switch is lost or 
the main bus power used for manual control is lost. GPC control of the valve can be 
lost if the FA MDM or GPC fail or if the main bus used for GPC control is lost. 


One can deduce what would happen with different combinations of failures. There are 
three main buses, nine control buses, and four FA MDMs in the vehicle. The buses and 
MDMs are assigned to the various valves in combinations that minimize the effects of 
individual and multiple failures. 
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All four OMS helium press valves have the same design, but the bus and MDM 
assignments are different. The vapor isolation valves work in a similar way, but they are 
set up to open whenever the helium press valves are open rather than having 
independent control. 


MAIN BUS MAIN BUS 


He РНН55/ МАРОК 1500 


CONTROL SWITCH NOT IN MANUAL CLOSA 


BUS 


OPEN COMMAND 


SOLHNOID 


VALVE 006500033. SCH; 2 


Figure 4-32. Solenoid valve schematic 


Tank Isolation and Crossfeed Valves and Switches 


The OMS tank isolation valves and crossfeed valves and some RCS valves are opened 
and closed by ac motors. The flow of ac power to motor control assemblies (MCAs) is 
controlled by ac circuit breakers on Panel MA73C. The MCA channels power to the 
valve motors and uses main bus power in its logic circuits. The logic power is carried by 
a special bus that is supplied by two main buses and is controlled by a switch on 

Panel MA73C. All the OMS and RCS motor-driven valves are divided into three valve 
groups (see Figure 4-33). There is an MCA for each group, and each MCA receives 
power from two main buses. 
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Figure 4-33. OMS valve logic power 


The switches for this type valve have two sets of contacts using a different control bus 
for each set of contacts. There are also two FA MDMs transmitting open and close 
commands. The valve will respond to a GPC open command only if the switch is not in 
the CLOSE position and will respond to a GPC close command only if the switch is not 
in the OPEN position. 


The manual close capability for a valve will be lost if one of the control buses for its 
switch is lost. The manual open capability is lost only if both control buses for the 
switch are lost. 


The GPC close capability will be lost if one of the FA MDMs (or its associated GPC) 
fails. The GPC open capability can be lost only if both FA MDMs (or GPCs) fail. 


The valve motors will not function if there is a loss of ac power, and the affected valves 
will remain stuck in their current positions. The ac motors will function if at least two of 
the three phases of ac bus power remain (see Figure 4-34). 


MCA power, which is needed to operate the valves, can be lost only if both main bus 
supplies are lost or if there is a loss of control bus power to the two switches that 
provide logic power. 


When there is a complete loss of MCA logic power, the talkbacks for the affected 
switches will rotate to their neutral position and show the barberpole pattern. The 
talkback will also show barberpole if either the fuel or oxidizer valves get stuck and 
there is a position mismatch between the two valves. 
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The procedures to deal with switch failures and talkback failures are covered in the 
Systems Malfunction Procedures book. By following the steps in that book, it should be 
possible to determine the cause of the failure. 


AFT POD AFT POD VLV GP 
VLV LOGIC Main bus 


ON 


Control bus ——>| Ө --> 


Control bus ——» © --- 


OFF 
Talkback Logic Motor 
power power power 
Position 
OP feedback 
Motor control GPC position commands 
assembly and feedback 


Manual position 
Control bus ——> OPEN commands 

GPC t$ (Open, close) 
Control bus —»|CLOSE 


Switch 


usa006500 010.cnv 


Figure 4-34. Motor-driven valve schematic 
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4.12 ORCS PGSC APPLICATION 


The crew can determine the effects of electrical bus or MDM failures by referring to the 
Reference Data book that is carried onboard. Another tool the crew can use on orbit is 
the ORCS application found on the PGSC (Payload General Support Computer). 
ORCS will display a maximum of two failures. The valve legend is the key to 
understanding this application. A darkened or highlighted square will indicate the 
capability that is lost. Figure 4-35 is an example of how an МОМ ЕАЗ failure affects the 
OMS and RCS. One can see that with this failure the Right OMS Helium/Press Vapor 
Isolation Valve A has lost its GPC OP capability. 


OMS RCS 
File Display OMS RCS Help 


VALVE LEGEND 
2=2nd Fail 
a КН OK Lost 
= nd Fail 
= 4 ТУС: P=PRI Lost 
5-Resultant Fail S-SEC Lost 


T-P&S Lost 


Pis ЕЗ 


Recall | Layout | Exit | 


RCS Б prior roat (if sw off) 
JET E = R2 = c: MDM Lost 


SUMMARY L4 ERU 
L5 


st 
е: МАНЕ Status CL 
f:Power Fail 


Figure 4-35. ORCS FA3 Failure 
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Pressure and Temperature Sensors 


The OMS pressure, temperature, and valve position sensors receive power through 
signal conditioners; specifically, the left side uses dedicated signal conditioners (DSC) 
OL 1 and DSC OL 2 (OL: operational left) and the right side uses DSC OR 1 and DSC 
OR 2 (OR: operational right). Each signal conditioner is redundantly powered by two 
main buses. Some sensor outputs go directly to gauges, and others are transmitted by 
FA MDMs to the GPCs and, in some cases, appear on displays (see Figure 4-36). 
When a particular MDM or signal conditioner fails, certain OMS data is lost. Specific 
losses can be checked in Reference Data (Figure 4-37 example). In order to provide an 
overview of the effects of these types of failures, examples of some displays showing 
MDM and signal conditioner assignments are provided here. 


2 3 4 5 
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Figure 4-36. REF DATA IO DSC LOSS Impacts to GNC SYS SUMM 2 
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Figure 4-37. REF DATA FA3 


5021/ /919 


OMS AFT QTY 1 Е 
OXID e8.eM 29.6 
FU 28.2М 29.9 
I. жар EDS 
JE 1150 
P320 


DPA 216 


Р 
rU ІШІМЕ. 
QTY 66 


5 P| 248M 252 
3 P| 250 | 252 
4 P 548 | ese 


5 
I/O ERROR FAS 
SYS SUMM 


GNC SYS SUMM e 


L ЗІ 
4 e46 | 246 
5 NES 


Notice the Ms next to 
the commfaulted data 
below in SYS SUMM 2 


5 011/17:49:5ec 
BFS 0007/0% 
[г R 


2720M 2690 
255 255 
255 255 

2240 2250 
Seu 525 

ОРМ ОР 
208 
ee8M 
98M 


c 37M 97 


- c 


17:49:41 


usa006500_050ar1.tif 


Figure 4-38. SYS SUMM 2 Display with FA3 Failure 
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The OMS quantity gauging hardware and logic electronics require main bus power for 
operations. Each gauge unit has a single main bus source. 


Left oxidizer Main A 
Left fuel Main B 
Right oxidizer Main C 
Right fuel Main A 


The panel meter is powered by the main C bus, and the numerals on the gauge require 
AC1 power for illumination (see Figure 4-39). The gauge output goes directly to the 
panel meter, but the aft probe quantity that is on the BFS GNC Systems Summary 2 
display is transmitted by FA MDMs: The left fuel and oxidizer quantities on FA3 and the 
right fuel and oxidizer quantities on FA2. Notice in Figure 4-38 that the Left OMS aft 
probe is commfaulted on GNC SYS SUMM 2. 
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Figure 4-39. REF DATA MAIN A 


4-39 


REF/ALL/GEN F 
usa006500 051r1.tif 


USA006500 
Rev. A 


Left OMS AFT 
"— Set INPUT Quantity probe lost 


L OMS Ps with FA 3 failure 
BALL VLVs bad се; 
igure 4- 
EM GNC s SUMM2 
LR RCS MANF 2P with ҒАЗ failure) 
L RCS BFS QTY 
FCS CH 3 FDBK 


ARM/PRESS 
N2 P VLV POS IND 
L,R RCS MANF 2 JET RM 
VLV STATUS 
R OMS GMBL SEC FDBK 
RGA 3 
GPC OUTPUT 


BDY FLP 
FCS CH 3 CMD 
HYD BRAKE ISOL VLV 3 OP CMD 
HYD MPS/TVC ISOL VLV 3 CMD 
L OMS CNTL VLV 2 
L,R RCS MANF 2 JETS 
TK ISOL VLV 1/2 CL 
OP 
XFEED VLV 1/2 CL 
OP 
3/4/5 CL 
OP 


R OMS CNTL VLV 1 
GMBL SEC 
He РЛ/АР ISOL VLV A 
PURGE VLV 1 


RGA 3 TEST 


“іп INPUT and OUTPUT columns, А or B indicates dual redundancy; 1, 2, 3, or 4 
indicates triple or quad redundancy 


usa006500_052r1 tif 


Figure 4-40. REF DATA FA3 


4-40 


USA006500 
Rev. A 


OMS Engine Control Valves and Engine Ignition 


OMS engine ignition occurs when the two control valves open. This will supply nitrogen 
to the pistons and open bipropellant valves £1 and £2. Each control valve has two coils. 
Only one coil is needed to open a control valve, but both control valves must open to 
have ignition (see Figure 4-41). 


The OMS engine switch has two sets of contacts; each carries control bus power to 
activate a main bus power supply for the coils in the engine control valves. If one of the 
control buses is lost, the affected coil will not receive main bus power. If a main bus is 
lost, one of the coils will not operate. Certain combinations of two bus failures will 
prevent both coils from operating and the affected OMS engine cannot be started. 


The commands to the coils arrive through FA MDMs (see Figure 4-42). If one ҒА МОМ 
is lost, one coil will not operate. If certain combinations of two MDMs fail, there will be 
no ignition for one of the engines. There are also combinations of MDM and bus 
failures that will prevent ignition. There are no combinations of two buses or MDMs that 
will prevent ignition of both OMS engines. The combinations of failures that affect OMS 
ignition are shown on the OMS Failures cue card (Figure 4-44). 


Oxidizer Fuel 


Control Valve #1 
(Сой 1 & Coll 2) - > Ball Valve Assembly #1 
Control Valve #2 
(Coll 1 & Coll 2) — — Ball Valve Assembly #2 
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Figure 4-41. Bipropellant valves 
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Figure 4-42. OMS Failures card 
Thrust Vector Control 


The OMS TVC system has a primary and secondary gimbal system for each engine. 
Each of the four gimbal systems has a single main bus power supply (see Table 4-4). 


Each gimbal system requires an enable command that passes through an FF MDM. 
The enable command switches on power for the logic circuits and direct current motors 
that move the pitch and yaw actuators. The position commands from flight control and 
position feedback data pass through FA MDMs (see Figure 4-43). 


If there is a main bus failure, the affected actuator will not operate and will be stuck in its 
current position. 


If a GPC fails, the FF MDM associated with it will have the TVC enable command stuck 
on until the FF MDM power is cycled off and then on. If the primary enable command is 
stuck on and the secondary gimbals are enabled, both gimbal systems will be enabled 
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and there could be conflicting commands to the actuator. If an FF MDM fails, the 
enable command from the MDM will be lost and the affected gimbal system will not 
function. 


When a GPC fails, the position command from its associated FA MDM will remain at its 
current value and the gimbal will be stuck. If the FA MDM fails, the gimbal commands 
will go to zero, so the affected gimbal system will be unusable. Failure of a GPC or FA 
MDM will cause a loss of position feedback data and an M will appear on the Maneuver 
display where the gimbal positions normally appear. 


The impact of bus and MDM failures on TVC operation can be seen on the OMS 
Failures card mentioned earlier. 


Table 4-4. DPS and EPS interface with the OMS TVC 


Actuator Position 
system command | commands and 
feedback 
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Figure 4-43. OMS Gimbal CMD and Feedback 


Pod Heaters 


The OMS pod and crossfeed line heaters require control bus and main bus power. The 
pod heaters require power from two control buses and one or two main buses in order 
to operate. The crossfeed line heaters require only one control bus and one main bus. 
Loss of a required bus causes the affected heater circuit not to operate at all, and the 
crew must switch to the alternate circuit to regain heater capability. The heater bus 
assignments are summarized below to show the general pattern for the various circuits. 


Notice that for the left and right B heater circuits, there are two main buses rather than 
one. The loss of one main bus will affect only some of the heaters on the B circuits. 
The heaters are controlled by thermostats, so no interaction with the GPCs is required. 
The temperature measurements do pass through the MDMs and the GPCs for display 
purposes. 


Table 4-5. OMS pod heaters 
раа БЕІН 


Left pod heat Control AB1 and Control BC1 and BC2 
eft pod heaters — | AB2 and Main A and Main B and C 


Right pod heaters Control BC1 and BC2 Control CA1 and CA2 
ӘТЕР апа Main В and Main A and С 
C feed Heater Control AB3 and Control BC3 and 
гоззтеес heaters | Main A Main B 
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QUESTIONS 


Fill in the down arrows for the OMS engines as they would appear in each of the 
following situations. 


(a) Left OMS Pc is 0 percent, and a AV loss is detected. 
OMS BOTH* 
L 
R 
(b) FAA is failed, the right OMS Pc is 0 percent, and a AV loss is detected. 
OMS BOTH* 
L 
R 
(c) The left OMS Pc indicated 0 percent, but no AV loss is detected. 
OMS BOTH* 
L 
R 
In which cases above would there be an OMS PC FAIL message? 


Refer to the OMS Failures cue card to determine which capabilities (left or right 
OMS engine ignition, left or right primary or secondary TVC) would be lost with the 
following failures. 

(a) Main A and FA1 

(b) Main C and control bus CA2 

(c) FA3 and FA4 


(d) FF1 and control bus BC2 


(e) FA2 and FF2 
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ЕА4 * 
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Figure 4-44. OMS Failures card 
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5.0 DIFFERENCES IN THE BFS 


The operation of the OMS with the BFS engaged is very similar to its normal operation. 
The hardware is no different and the two major operational software differences are 
summarized below. 


Automatic flight control post- MECO is not available when the BFS is engaged. 
Therefore all maneuvers must be done manually by using the RHC. The attitude 
direction indicator (ADI) error needles still provide valid guidance information for the 
crew to follow. 


The BFS OMS Engine RM is not as complex as PASS. BFS does not perform an 
acceleration check. The Pc flag and down arrow are linked in the BFS. Therefore, 
when the BFS is engaged, an OMS Pc failure (Pc «8096 during burn) will generate an 
OMS PC message and a down arrow. This exact failure on PASS would generate just 
an OMS PC message (see Figure 5-1). 
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Figure 5-1. BFS DEORB MNVR EXEC with OMS Pc Failure 
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ACRONYMS, ABBREVIATIONS, AND SYMBOLS 


Aft 

alternating current 
attitude direction indicator 
abort once around 

abort to orbit 

attitude 

automatic 


backup flight system 
barberpole 


velocity targets for deorbit 
center of gravity 

check 

close 

contingency 

crossfeed 

cathode-ray tube 

current 

caution and warning 


down 

digital autopilot 

deorbit 

deorbit 

Data processing system 


Dedicated Signal Conditioner 
enable 

engine 

electrical power system 
external tank 

execute 

external AV 


Fahrenheit, forward 

flight-critical aft МОМ 

flight control system 

Fault detection and identification 
flight-critical forward MDM 

feet per second 

Fuel 

forward 
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gimbal 
guidance, navigation, and control 
gaseous nitrogen 


group 
general purpose computer 


altitude, high 
apogee altitude 
helium 

perigee altitude 
target altitude 
heater 


initialization load 

integrated display processor 

inlet 

inhibit 

injector 

isolation 

specific impulse of rocket motor measured in thrust (Ib)/ 
propellant consumption (Ib/s) 


left, low 
leak 
Line 
left yaw 


missing (data) 

manifold 

motor control assembly 
Mission Control Center 
multiplexer/demultiplexer 
main engine cutoff 
mission elapsed time 
major mode 

maneuver 


nautical miles 
nitrogen 


overhead 

operational left 

orbital maneuvering system 
First OMS burn 

second OMS burn 

open 

operational sequence 
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operational right 
override 
oxidizer 


pitch, pressure 
preliminary advisory data 
chamber pressure 
powered explicit guidance 
PEG, type 4 

PEG, type 7 

panel 

pressure, pressurization 
primary 

proceed 

propellant 

pounds per square inch 
psi, absolute 

psi, gauge 


quantity 


Roll, right 

reaction control system 
regulator 

range to entry interface 
rotational hand controller 
return to launch site 
right yaw 


single-engine 
secondary 

selection 

separation 

systems management 
specialist function 
solid rocket booster 
status 

Space Transportation System 
summary 

system 


temperature, time 
transoceanic abort landing 
talkback 

temperature 

time of free fall 

time-to-go 
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TTA 
TTC 
ТТР 
TVC 
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target 

translational hand controller 
time of ignition 

tank 

transition 

transition DAP 

time to apogee 

time to circularize 

time to perigee 

thrust vector control 


Up 

Vernier RCS jet 

velocity-to-go in X, Y, and Z directions 
valve 

weight 

crossfeed 

yaw 

velocity change 

total velocity change 


velocity change in X, Y, and Z directions 
target angle 
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APPENDIXB ANSWERS 


SECTION 2 ANSWERS 


1. 


No. If an OMS engine is shutdown during a burn by taking the OMS engine switch 
to OFF, a purge will not occur. A purge will only occur when the switch is in the 
ARM/PRESS position. Taking the switch to OFF at any time inhibits the purge 
sequence. 


(a) The left OMS engine will burn because the switch is in ARM. 


(b) The left OMS engine will not have a purge at the end of the burn because the 
switch is not in ARM/PRESS. 


(c) OMS gauging will work for the left pod. OMS gauging will function as long as 
one OMS engine is on. 


(d) OMS gauging will work for the right pod. OMS gauging will function for both 
pods as long as either engine is on. 


If the A helium press valve is closed and the B helium press valve is open, both 
vapor isolation valves will be open. Both valves will be open whenever either 
helium press valve is open. 


If an OMS engine failed during a 2 Engine OMS burn, the larger attitude change will 
be in the yaw axis. This change could be seen on the ADI. First the shuttle would 
yaw to the side of the failed engine and then retrim to a single engine configuration. 
(Single engine trim would be yawed roughly 12 degrees to the side of the burning 
engine.) 


No. If both OMS engines are off and OMS propellant is being fed to the RCS jets, 
the BFS GNC Systems Summary 2 display does provide information on OMS 
quantity. The display includes the aft probe quantity, but that will not be updating if 
both OMS engines are off. 


Yes. If the left OMS engine valve switch on panel O14 is turned off during a burn, 
the engine will stop burning immediately. Taking the switch to OFF removes power 
from both engine control valves, and they will close and thereby shut down the 
engine. 


If there is a pitch gimbal error of 0.56? and a yaw error of 0.39°, the yaw actuator will 


not move because the error is less than 0.4?. The pitch actuator will move 
approximately 0.5? to correct the error of 0.56?. 
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Figure B-1. Example GNC Systems Summary 2 display 


8. Yes. Both OMS engines are burning. Left and Right OMS bipropellant valves are 


10. 


11. 


fully open. (100%) 


Yes. There is a way to double check the reading of 40 psi for the left OMS helium 
tank pressure on the display. The MEDS display uses a separate pressure sensor. 


According to the display, the left N2 press valve is open. It could be closed without 
turning OFF the OMS engine by putting the left OMS engine switch in the ARM 


position. 


According to the display, the right OMS М» tank pressure is at 20 psi. You could 
use the MEDS display to verify that this is not a sensor failure. The MEDS display 
provides an N» tank pressure reading from a separate sensor. 
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SECTION 3 ANSWERS 


30117 7 DEORB MNVR COAST 1 004710300337 


OMS BOTH 1 000/00:09:24 
L2 BURN RTT 
R 3ж 24R 80 AVTOT 415,8 
RCS SEL 4 25 P 56 TGO 8:40 
5 TV ROLL 180 26 Y 18 
TRIM LOAD ММВ 27 VCO X +403,15 
БР +0,4 TTG 00:00 Y -95,11 
7 LY 95,2 REI 4146 Z -46,14 
8 RY -5.2 TFF 17:30 
9 WT 246200 GMBL HA HP 
10:116 ee L R TGT 164 +15 
__4/10:10:00,0| P 45.9 +5,9 |CUR 160 +160 
TGT PEG 4 Y *6.4 -6.4 


14 C1 15910 


15 C2 -.6329 | PRI 28% 29* 35 ABORT ТОТ 0 


16 HT 655,800| SEC 30 31 


17 eT  113.674| OFF 32 33 FWD RCS 


18 PRPLT +10000 ARH 35 
TGT PEG 7 GMBL CK 34 DUMP 37 
19 AVX -299.6 OFF 38% 
20 AVY 2250.3 SURF DRIVE 
21 AVZ «127.3 ON 39 
LOAD 22/TIMER 23 OFF 40x 


Figure B-2. Example GNC Systems Summary 2 display 
1. The right OMS engine will be used for the burn. Item 3 is selected. 


2. The right engine pitch actuator and yaw actuator will be driven by the primary 
motors. Primary is selected with Item 29. 


3. The OMS burn will start at 4/10:10:00.0 and end at 4/10:18:40. The MET at TIG will 
be 4/10:10:00, and the burn duration should be equal to TGO (8:40). 


4. The current perigee altitude is 160 nm. It will be changed by 145 nm by the burn. 

5. The display does not indicate the correct configuration for starting a deorbit burn. 
The display indicates that the software is in MM 301. A transition to MM 302 is 
necessary before a burn can be started. 

6. Itis preferable їо be in free drift when setting up an OMS-to-RCS interconnect, 
because the RCS jets have no propellant supply for a short time during the 
interconnect procedure, and jets would fail off if commanded to fire. When the 
vehicle is in free drift, no RCS jets are commanded to fire. 


7. The approximate range (in percent) of the ungaugable region is 45 to 30 percent. 


B-3 


USA006500 
Rev. A 


SECTION 4 ANSWERS 


1. Down arrows for the OMS engines would appear as indicated in each of the 
following situations. 


(a) Left OMS Pc is О percent, and a AV loss is detected. 
The Left OMS engine is indicated to be failed. 


OMS BOTH* 
L T 
R 


(b) FAA is failed, the right OMS Pc is 0 percent, and a AV loss is detected. 


МУ 


There is no down arrow because the В OMS Pc data is commfaulted even 
though the right engine has failed. 


OMS BOTH* 
L 
R 


The left OMS P indicated 0 percent, but no AV loss is detected. 


~ 
е) 
МУ 


There is no down arrow because no AV loss was detected. The engine must 
still be providing thrust. 


OMS BOTH* 


L 
R 


2. In the cases above there would be an OMS PC FAIL message іп a & c. 


3. The capabilities (left or right OMS engine ignition, left or right primary or secondary 
TVC) that would be lost with the listed failures are as follows. 


(a) Main А and FA1 - Left engine ignition, left primary ТУС, right secondary ТУС 
(b) Main C and control bus CA2 — Right engine ignition, right primary ТУС 

(c) FA3 and FA4 — Right primary TVC, right secondary ТУС 

(d) FF1 and control bus BC2 — Left primary ТУС 

(e) FA2 and FF2 — Left secondary ТУС 
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[р HOOK OMS HOOK EUR 
VELCRO FAILURES VELCRO 


MNA (ALC1) MNA (ALC1) 
CNTLAB1 1 CNTLAB1 f Left OMS 


FA4 РАЗ * Ignition 


MNB (ALC2) MNB (ALC2) 
CNTLAB2 ў CNTLAB2 1 
FA1 FA2 


T If CNTL AB1 or AB2 (CA1 or CA2) failed and ign path still exists 
at OMS fail, assume L(R) OMS J is PRPLT FAIL 

* |f L(R) Pc failed high during burn, or FA3(4) failed, at L(R) | 
OMS fail, no guidance downmode after ЦК) OMS ENG 
switch OFF (TGO slow, ADI needles in error, 6 ft/s underburn) 


RIGHT OMS Right OMS 


MNC (APC3) 


MNC (ALC3) MNC (ALC3) 
CNTLCA1 1 CNTLCA1 1 Right OMS 


РАЗ FA4 * Ignition 


MNA (ALC1) MNA (ALC1) 


CNTLCA2 T CNTLCA2 1 
FA1 FA2 


Right OMS 
MNA (APC1) | Sec тус 


If two FA MDMs lost 


Preburn: During burn: 
MDMs |ENG - OFF |МАМ SHUTDN 


1.2 LEFT (ТУС) |BOTH 
‚З RIGHT (IGN) |LEFT 
4 LEFT (IGN RIGHT 


) 
3 LEFT (IGN) |RIGHT 
2,4 RIGHT (IGN) |LEFT 
3,4 RIGHT (TVC) |BOTH 
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APPENDIX C SUGGESTED REFERENCE DOCUMENTS 


1. 


Referenced training materials, currently available or in preparation, cover related 
space shuttle systems, guidance, navigation, and flight control subjects. 


There are Flight Procedures Handbooks that provide detailed explanations of crew 
procedures for all phases of flight. Three handbooks that are especially relevant to 
RCS are 

a. Ascent/Aborts 

b. Entry 

c. Ascent/Orbit/Entry Pocket Checklists and Cue Cards 


The procedures described in this book are specified in the following Flight Data File 
items: 


a. Ascent Checklist 

b. Orbit OPS Checklist 

c. Entry Checklist 

d. Ascent Pocket Checklist 

e. Orbit Pocket Checklist 

f. Entry Pocket Checklist Ascent/Entry Systems Procedures Checklist 
g. Systems Malfunctions Procedures Book 

h. Cue Cards 

i. DPS Dictionary 

j Reference Data 


The STS (Space Transportation System) Operational Flight Rules outline 
preplanned decisions for failure situations. 


The Space Shuttle Systems Handbook (SSSH) contains detailed drawings of all 
systems, including the RCS. 


The Shuttle Operational Data Book (SODB) is a compilation of data on all shuttle 
systems. 
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7. The Functional Subsystem Software Requirements (FSSR) provides detailed 
descriptions of the primary flight software. It is divided into separate books on 
various segments of the software. The following are relevant to the RCS: 


a. 


b. 


e. 


f. 


Redundancy Management 
Sequencing 

Displays and Controls 

GNC - Flight Control Ascent 
GNC - Flight Control Orbit DAP 


GNC - Flight Control Entry/Glide Return to Launch Site (GRTLS) 


8. The BFS Program Requirements Document (PRD) is the BFS equivalent to the 
FSSR. The two volumes of relevance to the RCS are 


a. 


b. 


Flight Control 


Sequencing 


The Shuttle Crew Operations Manual (SCOM) is a reference document for space 


shuttle crew members. It contains condensed information from a large number of 
space shuttle publications such as the FPH, FDF, workbooks, flight rules, and the 
SODB. 
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TRAINING MATERIALS EVALUATION 


Please answer the following questions regarding the lesson you just completed. Your feedback will allow 
us to produce more effective training materials. When completed, mail to: Manager, DT34. 


TITLE/CODE OF LESSON: Orbital Maneuvering System Workbook 21002 


SIZE OF AUDIENCE/CLASS: 


1. How well did this lesson meet its purpose? 


For each statement below, mark one box on the scale: Strongly Strongly 
Disagree Agree 
a. The lesson objectives are clearly stated. ПП Пп во о 
b. Тһе lesson objectives are clearly defined. ППППП п 
c. Тһе lesson effectively teaches skills and information. ПП ПП ПП rl 
d. Тһе lesson meets its purpose and objectives. ПП ПП ПП П 
2. How satisfying is the content of this lesson? 
For each statement below, mark one box on the scale: Strongly Strongly 
Disagree Agree 
a. The information is structured in a logical flow. и и и и и O 
b. Тһе content is clear. Пп п п п oO 
c. Тһе content is complete. и и и и ПП и 
d. The level of detail is correct for this information. ПП ПП ПП int 
e. The amount of information is effective. L1 D DL Lr LI 
f. The graphics contribute to my understanding. ПП ПП п 
3. How appealing was the presentation of this 
lesson? Strongly Strongly 
For each statement below, mark one box on the scale: Disagree Agree 
а. The overall presentation is appealing. ПП DL Lr LI 
b. The visuals chosen are appropriate for the lesson. ПП ПП ПП ПП gð 
c. Тһе visuals make the information more interesting. ооо ПП ПП Oa 
а. The graphics аге legibly reproduced. ПП и и и oO 
e. The audio/visual or print quality is good. СПП ПП п 
4. How valuable is this information? 
For each statement below, mark one box on the scale: Strongly Strongly 
Disagree Agree 
a. Тһе lesson teaches skills and information І need. ПП 0O ir 
b. Thelesson meets my expectations. ПП ПП oOo о 
c. This information is useful for later reference. и и и ПП O 
d. lwould recommend this lesson to others. и и и и и O 


PLEASE WRITE YOUR COMMENTS/QUESTIONS ON THE BACK OF THIS FORM. 
EXPLAIN ANY NEGATIVE ANSWERS IN SPECIFIC TERMS. 


THANK YOU IN ADVANCE FOR YOUR ASSISTANCE! 
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